./mail/roundcube-plugin-enigma, Enigma Plugin for Roundcube

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 1.3.7, Package name: php71-roundcube-plugin-enigma-1.3.7, Maintainer: taca

Enigma Plugin for Roundcube

This plugin adds support for viewing and sending of signed and encrypted
messages in PGP (RFC 2440) and PGP/MIME (RFC 3156) format.

The plugin uses gpg binary on the server and stores all keys
(including private keys of the users) on the server.
Encryption/decryption is done server-side. So, this plugin
is for users that trust the server.


Implemented features:
---------------------
+ PGP: signatures verification
+ PGP: messages decryption
+ PGP: Sending of encrypted/signed messages
+ PGP: keys management UI (key import, export, delete)
+ PGP: key generation (client- or server-side)
+ Handling of PGP keys attached to incoming messages
+ User preferences to disable plugin features
+ Attaching public keys to email


Required to run:
[converters/php-iconv] [graphics/php-gd] [databases/php-pdo_mysql] [mail/roundcube] [lang/python27] [security/pear-Crypt_GPG]

Required to build:
[www/apache24] [pkgtools/cwrappers]

Package options: apache, gd, iconv, mysql, php-sockets

Master sites:


Version history: (Expand)


CVS history: (Expand)


   2018-08-09 17:07:01 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
mail/roundcube-plugin-enigma: update to 1.3.7

- Enigma: [EFAIL] Don't decrypt PGP messages with no MDC protection (#6289)
   2018-05-16 10:17:31 by =?UTF-8?B?RnLDqWTDqXJpYyBGYXViZXJ0ZWF1?= | Files touched by this commit (3) | Package updated
Log message:
roundcube-plugin-enigma: update distinfo for 1.3.6
   2018-04-30 08:45:04 by Takahiro Kambe | Files touched by this commit (5) | Package updated
Log message:
mail/roundcube: update to 1.2.9

RELEASE 1.2.9
-------------
- Fix regression where IMAP commands with '*' uidset argument wasn't working
   2018-04-23 15:55:00 by Takahiro Kambe | Files touched by this commit (5) | Package updated
Log message:
mail/roundcube: update to 1.2.8

This is a security update to the stable version 1.2.  It fixes a recently
reported vulnerability allowing IMAP command injection via a GET parameters.
More details about this are published under CVE-2018-9846.

The second fix is about a missed remote content blocking on HTML messages with
specially crafted image and style tags.

We strongly recommend to update all productive installations of Roundcube
1.2.x.  Please do backup your data before updating!

CHANGELOG

* Fix check_request() bypass in places using get_uids() [CVE-2018-9846]
  (#6238)

* Fix possible IMAP command injection vulnerability [CVE-2018-9846] (#6229)

* Fix security issue in remote content blocking on HTML image and style tags
  (#6178)
   2017-11-09 02:13:12 by Takahiro Kambe | Files touched by this commit (5) | Package updated
Log message:
mail/roundcube: update to 1.2.7

Security fix for CVE-2017-16651.

RELEASE 1.2.7
-------------
- Fix rewind(): stream does not support seeking (#5950)
- Fix bug where HTML messages could have been rendered empty on some systems
  (#5957)
- Fix (again) bug where image data URIs in css style were treated as
  evil/remote in mail preview (#5580)
- Managesieve: Fix parsing dot-staffed lines in multiline text (#5838, #5959)
- Fix file disclosure vulnerability caused by insufficient input validation
  [CVE-2017-16651] (#6026)
   2017-09-11 15:57:24 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
Update roundcube-plugin-enigma to 1.2.6.

RELEASE 1.2.6
-------------
- Enigma: Fix compatibility with assets_dir
   2017-04-28 15:50:10 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
Update roundcube-plugin-enigma to 1.2.5.

Nothing is change except version.
   2017-03-12 14:34:39 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
Update roundcube-plugin-enigma to 1.2.4

RELEASE 1.2.4
-------------
- Enigma: Fix handling of messages with nested PGP encrypted parts (#5634)
- Enigma: Fix PHP fatal error when decrypting a message with invalid signature
  (#5555)
- Enigma: Fix missing require statement for Crypt_GPG_KeyGenerator (#5641)