2007-05-17 01:47:34 |
Leonel Nunez |
bug |
|
|
added bug |
2007-05-17 02:04:13 |
Leonel Nunez |
bug |
|
|
assigned to edgy-backports (upstream) |
2007-07-14 20:48:09 |
Scott Kitterman |
bug |
|
|
assigned to feisty-backports (upstream) |
2007-07-16 03:16:07 |
Scott Kitterman |
description |
squirrelmail backported version to dapper has security bugs fixed in gutsy |
Gutsy 2:1.4.10a-2 to Dapper (was 2:1.4.6-1/2:1.4.6-1ubuntu0.1/2:1.4.8-1~dapper1 - previous backport)
Gutsy 2:1.4.10a-2 to Edgy (was 2:1.4.8-1/ 2:1.4.8-1ubuntu0.1)
Gutsy 2:1.4.10a-2 to Feisty (was 2:1.4.9a-1/2:1.4.9a-1ubuntu0.1)
Gutsy 2:1.4.10a-2 has been built, installed, and tested on all three releases.
Debian/changelog since the oldest release above:
squirrelmail (2:1.4.10a-2) unstable; urgency=low
* Make use of new dictionaries-common SquirrelMail interface to
detect the installed squirrelspell dictionaries (Closes: #420877).
* Remove obsolete upgrading code.
* Make sure config files are not closed with '?>' since it's then
too easy to get stray whitespace at the end of the file.
-- Thijs Kinkhorst <thijs@debian.org> Thu, 31 May 2007 19:34:29 +0200
squirrelmail (2:1.4.10a-1) unstable; urgency=high
* New upstream security release.
- Fixes cross site scripting in the HTML filter [CVE-2007-1262]
- Tweaks SMTP error message display (Closes: #403705).
- Fixes address duplication on reply-all (Closes: #408242).
-- Thijs Kinkhorst <thijs@debian.org> Thu, 10 May 2007 12:04:48 +0200
squirrelmail (2:1.4.9a-1) unstable; urgency=high
* New upstream security release.
- Additionally tightens HTML filter for IE <= 5 parsing
absolutely everything and its horse.
-- Thijs Kinkhorst <thijs@debian.org> Mon, 4 Dec 2006 09:18:09 +0100
squirrelmail (2:1.4.9-1) unstable; urgency=high
* New upstream bugfix release.
- Includes cross site scripting security fix [CVE-2006-6142].
- Includes Internet Explorer security issue workaround.
- Fixes misspelled constant (Closes: #401022)
-- Thijs Kinkhorst <thijs@debian.org> Sat, 2 Dec 2006 17:35:43 +0100
squirrelmail (2:1.4.8-3) unstable; urgency=low
* Add note to README.Debian about server side sorting (Closes: #394286)
and regular_globals not being supported.
* Add IfModule conditionals for register_globals setting in
apache.conf (Closes: #398173).
-- Thijs Kinkhorst <thijs@debian.org> Mon, 13 Nov 2006 16:29:33 +0100
squirrelmail (2:1.4.8-2) unstable; urgency=low
* Update Debian patch to display options to cope with the custom
charset plugin. Thanks Tomas Kuliavas, Closes: #385300.
* Suggest php[45]-ldap, Closes: #392306.
* Improve package description.
-- Thijs Kinkhorst <thijs@debian.org> Fri, 20 Oct 2006 16:36:36 +0200
squirrelmail (2:1.4.8-1) unstable; urgency=high
* New upstream release
- Includes security fix: variable overwriting in compose.php
by logged-in user [CVE-2006-4019]
- Does not ship SquirrelMail developer's documentation anymore.
* Remove duplicate content from README.locales.
-- Thijs Kinkhorst <thijs@debian.org> Fri, 11 Aug 2006 13:53:20 +0200
squirrelmail (2:1.4.7-1) unstable; urgency=low
* New upstream bugfix release.
+ Addresses some low-impact, theoretical or disputed security bugs,
for which the code is tightened just-in-case:
- Possible local file inclusion (Closes: #373731, CVE-2006-2842)
- XSS in search.php (Closes: #375782, CVE-2006-3174)
+ Adds note to db-backend.txt about postgreSQL (Closes: #376605).
* Checked for standards version to 3.7.2, no changes necessary.
* Update maintainer address.
-- Thijs Kinkhorst <thijs@debian.org> Tue, 4 Jul 2006 14:49:23 +0200 |
|
2007-07-16 03:16:07 |
Scott Kitterman |
title |
Request backport for squirrelmail from gutsy to dapper and edgy |
Please backport for squirrelmail from gutsy to dapper, edgy, and feisty |
|
2007-07-16 03:17:16 |
Scott Kitterman |
dapper-backports: status |
New |
In Progress |
|
2007-07-16 03:17:16 |
Scott Kitterman |
dapper-backports: statusexplanation |
|
|
|
2007-07-16 03:17:24 |
Scott Kitterman |
edgy-backports: status |
New |
In Progress |
|
2007-07-16 03:17:24 |
Scott Kitterman |
edgy-backports: statusexplanation |
|
|
|
2007-07-16 03:17:32 |
Scott Kitterman |
feisty-backports: status |
New |
In Progress |
|
2007-07-16 03:17:32 |
Scott Kitterman |
feisty-backports: statusexplanation |
|
|
|
2007-07-16 03:17:46 |
Scott Kitterman |
bug |
|
|
added subscriber Ubuntu Package Archive Administrators |
2007-07-17 01:44:55 |
Scott Kitterman |
dapper-backports: importance |
Undecided |
Wishlist |
|
2007-07-17 01:45:12 |
Scott Kitterman |
edgy-backports: importance |
Undecided |
Wishlist |
|
2007-07-17 01:45:25 |
Scott Kitterman |
feisty-backports: importance |
Undecided |
Wishlist |
|
2007-07-20 09:22:52 |
Martin Pitt |
dapper-backports: status |
In Progress |
Fix Released |
|
2007-07-20 09:22:52 |
Martin Pitt |
dapper-backports: statusexplanation |
|
* Trying to backport squirrelmail...
- <squirrelmail_1.4.10a.orig.tar.gz: downloading from librarian>
- <squirrelmail_1.4.10a-2.diff.gz: downloading from librarian>
- <squirrelmail_1.4.10a-2.dsc: downloading from librarian>
I: Extracting squirrelmail_1.4.10a-2.dsc ... done.
I: Building backport of squirrelmail-1.4.10a as 2:1.4.10a-2~dapper1 ... done.
|
|
2007-07-20 09:23:27 |
Martin Pitt |
edgy-backports: status |
In Progress |
Fix Released |
|
2007-07-20 09:23:27 |
Martin Pitt |
edgy-backports: statusexplanation |
|
* Trying to backport squirrelmail...
- <squirrelmail_1.4.10a.orig.tar.gz: downloading from librarian>
- <squirrelmail_1.4.10a-2.diff.gz: downloading from librarian>
- <squirrelmail_1.4.10a-2.dsc: downloading from librarian>
I: Extracting squirrelmail_1.4.10a-2.dsc ... done.
I: Building backport of squirrelmail-1.4.10a as 2:1.4.10a-2~edgy1 ... done.
|
|
2007-07-20 09:24:03 |
Martin Pitt |
feisty-backports: status |
In Progress |
Fix Released |
|
2007-07-20 09:24:03 |
Martin Pitt |
feisty-backports: statusexplanation |
|
* Trying to backport squirrelmail...
- <squirrelmail_1.4.10a.orig.tar.gz: downloading from librarian>
- <squirrelmail_1.4.10a-2.diff.gz: downloading from librarian>
- <squirrelmail_1.4.10a-2.dsc: downloading from librarian>
I: Extracting squirrelmail_1.4.10a-2.dsc ... done.
I: Building backport of squirrelmail-1.4.10a as 2:1.4.10a-2~feisty1 ... done.
|
|