[Mageia-dev] Freeze push: roundcubemail

2013-04-02 Thread Damien Lallement

Please push 0.8.6 (now 0.8.5) as it's a security update.

"We just published new releases which fix a recently reported 
vulnerability that allows an attacker to access files on the server."


I will work on an update request for Mageia 2.

Thanks!
--
Damien Lallement
twitter: damsweb - IRC: damsweb/coincoin


Re: [Mageia-dev] Freeze push: roundcubemail

2013-02-11 Thread David Walser
David Walser  writes:
> Damien Lallement  writes:
> > Please push 0.8.5 (now 0.8.4) as it's a security update: CVE-2012-6121
> 
> Does that affect 0.7.x in Mageia 2?

Looking at the code, I don't think it does.  The added test in the upstream
commit to fix it could be used to check.

https://bugzilla.redhat.com/show_bug.cgi?id=909289



Re: [Mageia-dev] Freeze push: roundcubemail

2013-02-11 Thread Anne nicolas
2013/2/11 Damien Lallement 

> Please push 0.8.5 (now 0.8.4) as it's a security update: CVE-2012-6121
> Thanks
> --
> Damien Lallement
> twitter: damsweb - IRC: damsweb/coincoin
>

done

-- 
Anne
http://www.mageia.org


Re: [Mageia-dev] Freeze push: roundcubemail

2013-02-11 Thread David Walser
Damien Lallement  writes:
> Please push 0.8.5 (now 0.8.4) as it's a security update: CVE-2012-6121

Does that affect 0.7.x in Mageia 2?



[Mageia-dev] Freeze push: roundcubemail

2013-02-11 Thread Damien Lallement

Please push 0.8.5 (now 0.8.4) as it's a security update: CVE-2012-6121
Thanks
--
Damien Lallement
twitter: damsweb - IRC: damsweb/coincoin


Re: [Mageia-dev] Freeze push: roundcubemail

2012-04-05 Thread Damien Lallement

Le 05/04/2012 03:40, Anssi Hannula a écrit :

05.04.2012 03:54, Damien Lallement kirjoitti:

Hi,

Please push roundcubemail.
0.7.1>  0.7.2
It's a service release version.
It fixes some recent bugs and improves stability. It's considered stable
and we recommend to update all productive installations of Roundcube
with this version.

- Fix handling of % character in IMAP protocol (#1488382)
- Fix duplicate names handling in addressbook searches (#1488375)
- Fix displaying of HTML messages from Disqus (#1488372)
- Disable E_STRICT warnings on PHP 5.4
- Prevent from folder selection on virtual folder collapsing (#1488346)
- Fix automatic unsubscribe of non-existent folders
- Fix double-quotes handling in recipient names
- User configurable setting how to display contact names in list
- Make contacts list sorting configurable for the admin/user
- Fix parse errors in DDL files for MS SQL Server
- Revert SORT=DISPLAY support, removed by mistake (#1488327)
- Add lost translation label in de_DE (#1488315)
- Fix drafts update issues when edited from preview pane (#1488314)
- Fix wrong variable name in rcube_ldap.php (#1488302)
- Make mime type detection based on filename extension to be
case-insensitive
- Fix failure on MySQL database upgrade from 0.7 - text column can't
have default value (#1488300)

Thanks,


SVN still has 0.7.1 only.


Oops... :-)
Fixed, thanks.
--
Damien Lallement
twitter: damsweb - IRC: damsweb/coincoin


Re: [Mageia-dev] Freeze push: roundcubemail

2012-04-04 Thread Anssi Hannula
05.04.2012 03:54, Damien Lallement kirjoitti:
> Hi,
> 
> Please push roundcubemail.
> 0.7.1 > 0.7.2
> It's a service release version.
> It fixes some recent bugs and improves stability. It's considered stable
> and we recommend to update all productive installations of Roundcube
> with this version.
> 
> - Fix handling of % character in IMAP protocol (#1488382)
> - Fix duplicate names handling in addressbook searches (#1488375)
> - Fix displaying of HTML messages from Disqus (#1488372)
> - Disable E_STRICT warnings on PHP 5.4
> - Prevent from folder selection on virtual folder collapsing (#1488346)
> - Fix automatic unsubscribe of non-existent folders
> - Fix double-quotes handling in recipient names
> - User configurable setting how to display contact names in list
> - Make contacts list sorting configurable for the admin/user
> - Fix parse errors in DDL files for MS SQL Server
> - Revert SORT=DISPLAY support, removed by mistake (#1488327)
> - Add lost translation label in de_DE (#1488315)
> - Fix drafts update issues when edited from preview pane (#1488314)
> - Fix wrong variable name in rcube_ldap.php (#1488302)
> - Make mime type detection based on filename extension to be
> case-insensitive
> - Fix failure on MySQL database upgrade from 0.7 - text column can't
> have default value (#1488300)
> 
> Thanks,

SVN still has 0.7.1 only.

-- 
Anssi Hannula


[Mageia-dev] Freeze push: roundcubemail

2012-04-04 Thread Damien Lallement

Hi,

Please push roundcubemail.
0.7.1 > 0.7.2
It's a service release version.
It fixes some recent bugs and improves stability. It's considered stable 
and we recommend to update all productive installations of Roundcube 
with this version.


- Fix handling of % character in IMAP protocol (#1488382)
- Fix duplicate names handling in addressbook searches (#1488375)
- Fix displaying of HTML messages from Disqus (#1488372)
- Disable E_STRICT warnings on PHP 5.4
- Prevent from folder selection on virtual folder collapsing (#1488346)
- Fix automatic unsubscribe of non-existent folders
- Fix double-quotes handling in recipient names
- User configurable setting how to display contact names in list
- Make contacts list sorting configurable for the admin/user
- Fix parse errors in DDL files for MS SQL Server
- Revert SORT=DISPLAY support, removed by mistake (#1488327)
- Add lost translation label in de_DE (#1488315)
- Fix drafts update issues when edited from preview pane (#1488314)
- Fix wrong variable name in rcube_ldap.php (#1488302)
- Make mime type detection based on filename extension to be 
case-insensitive
- Fix failure on MySQL database upgrade from 0.7 - text column can't 
have default value (#1488300)


Thanks,
--
Damien Lallement
twitter: damsweb - IRC: damsweb/coincoin