summaryrefslogtreecommitdiff
path: root/mail/squirrelmail
AgeCommit message (Collapse)AuthorFilesLines
2007-03-24Prepare for switching to NO_MTREE=yes.joerg1-3/+3
2007-01-10Depend on the latest version.martti1-2/+2
2006-12-07Fix man page installation.joerg1-2/+2
2006-12-07Oops, revert previous change; wrong usage of PKGMANDIR.taca1-2/+2
2006-12-06Use PKGMANDIR.taca1-2/+2
2006-12-04Update squirrelmail to 1.4.9a.obache4-16/+16
ChangLog: Version 1.4.9a - 3 December 2006 -------------------------------- - Security: Multiple IE cross site scripting issues related to the widely acceptation of the word expression and url by IE. - Security: Removing @import when sanitizing html mail. Version 1.4.9 - 2 December 2006 ------------------------------- - Drop obsolete script plugins/make_archive.pl. - Fixed Google translate form in translate plugin. Added new language pairs. - Added XMAGICTRASH extension tests in configtest utility. Removed code that handled 'inbox.trash' as special folder in courier (#1354393). - Allowed moving folders to trash in courier. - Fix misspelled constant PREG_SPLIT_NI_EMPTY in sqimap_get_message (#1543573). - Provide View Unsafe Images link on viewing a text/html attachment. - Fix variable typo in folders_create.php (#1545316). - Added Courier IMAP OUTBOX check to configtest utility. - If mailbox name starts with slash or contains ../, error message is generated. Safety check for insecure default UW IMAP setup (#1557078). - Ignore message copy errors when messages are deleted. Allows to delete messages when quota is exceeded (#614887, #646386, #1446026). - Fixed unintended literal fetching (#1562271). - Added global file based address book listing controls. Added line length configuration option for local_file address book backend (#1181561). Added address book data integrity checks in local_file address book backend. Fixed eregi and object notices in local_file and database address book backends. Added additional address book field support. - Fixed variable corruption in configtest utility. - Checked if configuration file is readable in configuration utility (#1568355). - Special mailboxes marked in special_mailbox hook are no longer listed in folder delete, rename and subscription options. - Translate plugin: prevent PHP notice when viewing empty message. - Add CEST and MEST (non-standard) timezone codes for +0200. - Add <label> to From field in message list. - Add support for parsing SpamAssassin's X-Spam-Status header (#1589520). - Fix in bodystructure parser code related to strings ending with an escape character. - Added "attachment */*" hook - Added third parameter $logout_link to logout_error hook that allows plugin control over login page URI displayed on login error page. - Security: close cross site scripting vulnerability in draft, compose and mailto functionality [CVE-2006-6142]. - Security: work around an issue in Internet Explorer that would guess the mime type of a file based on contents, not Content-Type header.
2006-11-10Use find -print | xargs rather than find -exec.tv1-4/+4
2006-08-27Added BUILD_DEFS (taken from ja-squirrelmail).martti1-1/+2
2006-08-14Update "squirrelmail" and "squirrelmail-locales" package to version 1.4.8.tron4-17/+13
Changes since version 1.4.7: - A security fix for CVE-2006-4019 - A collection of bugfixes
2006-07-13Updated squirrelmail to 1.4.7martti7-100/+28
- Fixed URL for Read Receipts being incorrect in some cases (#1177518). - Fixed endless loop when trying to parse "From: )(" (#1517867). - Using is_file() instead of file_exists() in fortune plugin (#1499134). - Add manual page for conf.pl under contrib. - Don't allow selecting INBOX as Sent, Draft or Trash folder (#1242346).
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-06-04Add fix for security issue 2006-06-01 from SquirrelMail CVS repository.tron3-3/+63
Bump package revision.
2006-06-02Rename all PHP 4 packages to php4-*, all PHP 5 packages to php5-*,joerg1-3/+4
all PEAR packages to php?-pear-* and all Apache packages to ap13-* or ap2-* respectively. Add new variables to simplify the Makefile handling. Add CONFLICTS on the old names. Reset revisions of bumped packages. ap-php will now depend on the default Apache and PHP version. All programs using it have an implicit option of the Apache version as well. OK from jlam@ and adrianp@.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-11Updated mail/squirrelmail to 1.4.6nb1martti3-3/+23
* added patch for Ukrainian translation (needed by the new squirrelmail-locales)
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-21- remove unused file (pkg/33089)martti1-3/+4
- pkglint -Wall fixes
2006-02-27Updated squirrelmail to 1.4.6martti11-148/+28
This release is very important, and we strongly advise everybody to update to the latest release. Security Update =============== This version contains a number of security updates that were brought to our attention via a number of sources. - In webmail.php, the right_frame parameter was not properly sanitized to deal with very lenient browsers, which allowed for cross site scripting or frame replacing. [CVE-2006-0188] - In the MagicHTML function, some very obscure constructs were discovered to be exploitable: 'u\rl' was interpreted as 'url' (privacy concern), and comments could be inside keywords (allows for cross site scripting). Both only affect Internet Explorer users. Found by Martijn Brinkers and Scott Hughes. [CVE-2006-0195] - The function sqimap_mailbox_select did not strip newlines from the mailbox parameter, and thereby allowed for IMAP command injection. Found by Vicente Aguilera. [CVE-2006-0377]
2006-02-17Fixed warnings found by pkglint -Wall.martti3-21/+25
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-3/+4
2006-02-03s/SMDIRDIR/SMDIR/ and bump PKGREVISION.martti1-3/+3
2006-01-20Use SUBST framework. Replace some "find foo | xargs bar" withjoerg1-19/+17
"find foo -exec bar {} \;" while here, the former is faster, but can't cope with all quoting issues and is also more likely to hit argument length limits. CONFLICT to ja-squirrelmail.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-10List ${SMDIR} and ${SMDIR}/config in REQD_DIRS instead of OWN_DIRSmartti1-2/+3
to avoid problems with bulk builds with CHECK_FILES=yes. Suggested by Johnny Lam on tech-pkg@ list.
2005-12-09Use pre-configure instead of post-patch so it's easier to (re)create patches.martti1-2/+2
2005-12-09- remove all .orig* files. Noted by Lubomir Sedlacik.martti1-2/+2
- use post-patch instead of pre-configure
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig2-4/+4
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-12-05Make this work with PHP 5.1.1martti3-3/+17
2005-12-05Updated squirrelmail to 1.4.5nb2martti3-3/+17
- avoid corrupted attachment downloads (pkg/32175).
2005-09-20Fix "Fatal error: Only variables can be passed by reference" inschmonz7-3/+112
several files that occurs with PHP 5.0.5 by applying the small "squirrelmail-stable.diff" from the SourceForge page about the bug: http://sourceforge.net/tracker/index.php?func=detail&aid=1237160&group_id=311&atid=423679 Problem reported by Nathan Arthur in private mail. Fix OK'd by martti@.
2005-07-20- Allow depends on ja-squirrelmail package in buildlink3.mk.taca2-6/+6
- Some modification to MESSAGES: * remove trailing white space. * use www.example.com as example URL.
2005-07-18Updated mail/squirrelmail to 1.4.5martti6-676/+36
* lots of bug fixes * translation updates
2005-07-16Remove some unnecessarily strong dependencies on perl that resultedjlam1-2/+2
from including perl5/buildlink3.mk. These packages just need the Perl interpreter, and can just add "perl" to USE_TOOLS instead.
2005-07-07CONFLICTS with ja-squirrelspellmartti1-1/+2
2005-07-07Drop trailing spacemartti1-2/+2
2005-07-06Added some common code for squirrelmail plugins. From cube@ in a private mail.martti1-0/+25
2005-06-16Updated squirrelmail to 1.4.4nb1martti4-5/+657
* Fix several cross site scripting vulnerabilities http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0337
2005-05-23Removed trailing white-space.rillig1-1/+1
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-20Regen to make GNU patch happy.minskim2-15/+8
2005-01-26Make sure to change current directory to ${WRKSRC} before removing filesmartti1-1/+2
like "*.orig" by find(1).
2005-01-24Initial version. This will be used by squirrelmail-locales.martti1-0/+18
2005-01-23Updated squirrelmail to 1.4.4martti4-518/+50
We are pleased to announce the release of SquirrelMail 1.4.4. This release is a strongly recommended upgrade due to a number of security issues that have been resolved since 1.4.3a. About This Release ------------------ This release contains a number of bug fixes, and security updates. The list is very long, as this version has been hiding in the trees for a while. For a full list of the changes, you can see the changelog here: http://www.squirrelmail.org/changelog.php A general summary of updates includes a few cross site scripting issues, and two possible file inclusion issue (one remote, one local). Better IMAP handling introduced for certain IMAP servers that advertise LOGINDISABLED, folder handling, and a number of locales issues. Locales ------- Shortly after the release of 1.4.3, the locales were broken out of the main branch into their own branch. This makes the SquirrelMail package itself a lot smaller, along with allowing administrators to download just the packages they need. Details on this change can be found in the ReleaseNotes and the INSTALL files.
2004-12-22chmod directories and other filesmartti1-3/+4
2004-12-22chmod only filesmartti1-2/+2
2004-12-22Use ${SHAREMODE} instead of a-w with chmodmartti1-2/+2
2004-12-21Use ${VARBASE} instead of hardcoding /varmartti1-2/+2
2004-12-19s,PHP4,PHP, in COMMENT - this package doesn't specifically require PHP4jdolecek1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-21 08:21:00 +0000