Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2010-07-25 13:41:03 by S.P.Zeidler | Files touched by this commit (3) | |
Log message:
Pullup ticket 3181 - requested by tron
security update
Revisions pulled up:
- pkgsrc/mail/squirrelmail/Makefile 1.115
- pkgsrc/mail/squirrelmail/PLIST 1.37
- pkgsrc/mail/squirrelmail/distinfo 1.60
-------------------------------------------------------------------------
Module Name: pkgsrc
Committed By: tron
Date: Sat Jul 24 12:20:34 UTC 2010
Modified Files:
pkgsrc/mail/squirrelmail: Makefile PLIST distinfo
Log message:
Update "squirremail" package to version 1.4.21. Changes since 1.4.20:
- Now allow more than one plugin to control the compose form submit action.
- When sorting by received date, the received date is now shown on the
message list.
- Explicitly disable browser caching for left_main and right_main pages
(#2983134).
- Fix error with SpamCop reporting plugin not being able to send report as
emails (#1795310).
- Fix typo in SpamCop plugin.
- Reduced default time security tokens stay valid from 30 days to 2 days
(reduces chances of session data growing too large)
- Several speed enhancements for recent fixes regarding the display of
encoded subjects, including a fix for messages with invalid subject
encoding (includes #2987016 amongst several other issues reported via
mailing list, etc.) (Many thanks to Zdenek Pytela for the untiring help
diagnosing and testing.)
- Fixed minor vulnerability in Mail Fetch plugin.
[CVE-2010-1637/TEHTRI-SA-2010-009]
- Now properly quote personal part of encoded addresses when replying.
- Now fill in default subject when forwarding as attachment (#2936541).
- Implement header folding that doesn't add extraneous spaces so unfolding
is less ambiguous (#1951776).
- Fixed issues caused by use of PostgreSQL keyword "user" in \
SquirrelMail's
default preferences database schema (#2943483).
- Fixed attachment filename decoding problems (#2994865).
- Now default search criteria to the TO header when searching the sent fold=
er.
- Fixed literal processing of 8-bit usernames/passwords during login.
[CVE-2010-2813]
To generate a diff of this commit:
cvs rdiff -u -r1.114 -r1.115 pkgsrc/mail/squirrelmail/Makefile
cvs rdiff -u -r1.36 -r1.37 pkgsrc/mail/squirrelmail/PLIST
cvs rdiff -u -r1.59 -r1.60 pkgsrc/mail/squirrelmail/distinfo
|
Next | Query returned 1 messages, browsing 1 to 10 | previous