FFe: Sync squirrelmail 2:1.4.20-1 (universe) from Debian unstable (main)

[Andreas Wenning]

Please sync squirrelmail 2:1.4.20-1 (universe) from Debian unstable (main)

Explanation of FeatureFreeze exception:
This will replace the RC we currently have with the final 1.4.20. The RC contains security fixes which needed excessive testing; and we should have a final version of those. A few minor feature improvements are included; but as we are pre-beta i think it is a reasonable trade for getting a final version.

From the release notes:
"This release makes final the changes implemented in our last two release candidates and adds several smaller fixes and feature improvements."
"Due to the security fixes included in our last two release candidate packages, we advise all users of SquirrelMail versions 1.4.19 and below to upgrade."

Changelog entries since current lucid version 2:1.4.20~rc2-1:

squirrelmail (2:1.4.20-1) unstable; urgency=low

  * New upstream release.
    + Addresses search bug (closes: #550763).
  * Update to policy 3.8.4, no changes necessary.

 -- Thijs Kinkhorst <email address hidden> Sun, 07 Mar 2010 16:26:58 +0100

[Daniel Hahler (blueyed)]

I've subscribed ubuntu-release.
However, can you elaborate some, according to
 https://wiki.ubuntu.com/FreezeExceptionProcess#FeatureFreeze%20for%20new%20upstream%20versions

Thanks.

[StefanPotyra (sistpoty)]

what's unclear about the freeze exception procedure?

Did you test squirrelmail in a Lucid environment?
What about rdepends?
> apt-cache rdepends squirrelmail
squirrelmail
Reverse Depends:
  squirrelmail-viewashtml
  squirrelmail-viewashtml
  squirrelmail-viewashtml
  squirrelmail-spam-buttons
  squirrelmail-sent-confirmation
  squirrelmail-secure-login
  squirrelmail-logger
  squirrelmail-lockout
  squirrelmail-locales
  squirrelmail-decode
  squirrelmail-compatibility
  dtc-toaster
  dtc-toaster
  avelsieve

build log of the requested package would also be nice, thanks!

[Andreas Wenning (andreas-wenning)]

Got caught up by preparing a security update of another package, so intentionally left it half-finished until time permitted to catch up...

Attached is a build-log of the package in lucid.

Package has been tested in a lucid chroot.

I've installed and tested the following plugins against the new package in a lucid chroot as well:
 squirrelmail-viewashtml
 squirrelmail-spam-buttons
 squirrelmail-sent-confirmation
 squirrelmail-logger
 squirrelmail-lockout
 squirrelmail-quicksave

This plugin is implicitly tested through some of the above:
 squirrelmail-compatibility

Not tested plugins, as I don't have the infrastructure to test / not possible in a chroot:
 squirrelmail-secure-login
 squirrelmail-locales
 squirrelmail-decode
 avelsieve
 dtc-toaster
installation of the above plugins has of course been tested.

[Martin Pitt (pitti)]

This looks appropriate, approved. I subscribed ubuntu-archive.

[James Westby (james-w)]

[Updating] squirrelmail (2:1.4.20~rc2-1 [Ubuntu] < 2:1.4.20-1 [Debian])
 * Trying to add squirrelmail...
2010-03-22 18:25:34 INFO - <squirrelmail_1.4.20.orig.tar.gz: downloading from http://ftp.debian.org/debian/>
2010-03-22 18:25:34 INFO - <squirrelmail_1.4.20-1.dsc: downloading from http://ftp.debian.org/debian/>
2010-03-22 18:25:35 INFO - <squirrelmail_1.4.20-1.diff.gz: downloading from http://ftp.debian.org/debian/>
I: squirrelmail [universe] -> squirrelmail_2:1.4.20~rc2-1 [universe].