summaryrefslogtreecommitdiff
path: root/mail/squirrelmail
AgeCommit message (Collapse)AuthorFilesLines
2006-08-27Added BUILD_DEFS (taken from ja-squirrelmail).martti1-1/+2
2006-08-14Update "squirrelmail" and "squirrelmail-locales" package to version 1.4.8.tron4-17/+13
Changes since version 1.4.7: - A security fix for CVE-2006-4019 - A collection of bugfixes
2006-07-13Updated squirrelmail to 1.4.7martti7-100/+28
- Fixed URL for Read Receipts being incorrect in some cases (#1177518). - Fixed endless loop when trying to parse "From: )(" (#1517867). - Using is_file() instead of file_exists() in fortune plugin (#1499134). - Add manual page for conf.pl under contrib. - Don't allow selecting INBOX as Sent, Draft or Trash folder (#1242346).
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-06-04Add fix for security issue 2006-06-01 from SquirrelMail CVS repository.tron3-3/+63
Bump package revision.
2006-06-02Rename all PHP 4 packages to php4-*, all PHP 5 packages to php5-*,joerg1-3/+4
all PEAR packages to php?-pear-* and all Apache packages to ap13-* or ap2-* respectively. Add new variables to simplify the Makefile handling. Add CONFLICTS on the old names. Reset revisions of bumped packages. ap-php will now depend on the default Apache and PHP version. All programs using it have an implicit option of the Apache version as well. OK from jlam@ and adrianp@.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-11Updated mail/squirrelmail to 1.4.6nb1martti3-3/+23
* added patch for Ukrainian translation (needed by the new squirrelmail-locales)
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-21- remove unused file (pkg/33089)martti1-3/+4
- pkglint -Wall fixes
2006-02-27Updated squirrelmail to 1.4.6martti11-148/+28
This release is very important, and we strongly advise everybody to update to the latest release. Security Update =============== This version contains a number of security updates that were brought to our attention via a number of sources. - In webmail.php, the right_frame parameter was not properly sanitized to deal with very lenient browsers, which allowed for cross site scripting or frame replacing. [CVE-2006-0188] - In the MagicHTML function, some very obscure constructs were discovered to be exploitable: 'u\rl' was interpreted as 'url' (privacy concern), and comments could be inside keywords (allows for cross site scripting). Both only affect Internet Explorer users. Found by Martijn Brinkers and Scott Hughes. [CVE-2006-0195] - The function sqimap_mailbox_select did not strip newlines from the mailbox parameter, and thereby allowed for IMAP command injection. Found by Vicente Aguilera. [CVE-2006-0377]
2006-02-17Fixed warnings found by pkglint -Wall.martti3-21/+25
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-3/+4
2006-02-03s/SMDIRDIR/SMDIR/ and bump PKGREVISION.martti1-3/+3
2006-01-20Use SUBST framework. Replace some "find foo | xargs bar" withjoerg1-19/+17
"find foo -exec bar {} \;" while here, the former is faster, but can't cope with all quoting issues and is also more likely to hit argument length limits. CONFLICT to ja-squirrelmail.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-10List ${SMDIR} and ${SMDIR}/config in REQD_DIRS instead of OWN_DIRSmartti1-2/+3
to avoid problems with bulk builds with CHECK_FILES=yes. Suggested by Johnny Lam on tech-pkg@ list.
2005-12-09Use pre-configure instead of post-patch so it's easier to (re)create patches.martti1-2/+2
2005-12-09- remove all .orig* files. Noted by Lubomir Sedlacik.martti1-2/+2
- use post-patch instead of pre-configure
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig2-4/+4
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-12-05Make this work with PHP 5.1.1martti3-3/+17
2005-12-05Updated squirrelmail to 1.4.5nb2martti3-3/+17
- avoid corrupted attachment downloads (pkg/32175).
2005-09-20Fix "Fatal error: Only variables can be passed by reference" inschmonz7-3/+112
several files that occurs with PHP 5.0.5 by applying the small "squirrelmail-stable.diff" from the SourceForge page about the bug: http://sourceforge.net/tracker/index.php?func=detail&aid=1237160&group_id=311&atid=423679 Problem reported by Nathan Arthur in private mail. Fix OK'd by martti@.
2005-07-20- Allow depends on ja-squirrelmail package in buildlink3.mk.taca2-6/+6
- Some modification to MESSAGES: * remove trailing white space. * use www.example.com as example URL.
2005-07-18Updated mail/squirrelmail to 1.4.5martti6-676/+36
* lots of bug fixes * translation updates
2005-07-16Remove some unnecessarily strong dependencies on perl that resultedjlam1-2/+2
from including perl5/buildlink3.mk. These packages just need the Perl interpreter, and can just add "perl" to USE_TOOLS instead.
2005-07-07CONFLICTS with ja-squirrelspellmartti1-1/+2
2005-07-07Drop trailing spacemartti1-2/+2
2005-07-06Added some common code for squirrelmail plugins. From cube@ in a private mail.martti1-0/+25
2005-06-16Updated squirrelmail to 1.4.4nb1martti4-5/+657
* Fix several cross site scripting vulnerabilities http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0337
2005-05-23Removed trailing white-space.rillig1-1/+1
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-20Regen to make GNU patch happy.minskim2-15/+8
2005-01-26Make sure to change current directory to ${WRKSRC} before removing filesmartti1-1/+2
like "*.orig" by find(1).
2005-01-24Initial version. This will be used by squirrelmail-locales.martti1-0/+18
2005-01-23Updated squirrelmail to 1.4.4martti4-518/+50
We are pleased to announce the release of SquirrelMail 1.4.4. This release is a strongly recommended upgrade due to a number of security issues that have been resolved since 1.4.3a. About This Release ------------------ This release contains a number of bug fixes, and security updates. The list is very long, as this version has been hiding in the trees for a while. For a full list of the changes, you can see the changelog here: http://www.squirrelmail.org/changelog.php A general summary of updates includes a few cross site scripting issues, and two possible file inclusion issue (one remote, one local). Better IMAP handling introduced for certain IMAP servers that advertise LOGINDISABLED, folder handling, and a number of locales issues. Locales ------- Shortly after the release of 1.4.3, the locales were broken out of the main branch into their own branch. This makes the SquirrelMail package itself a lot smaller, along with allowing administrators to download just the packages they need. Details on this change can be found in the ReleaseNotes and the INSTALL files.
2004-12-22chmod directories and other filesmartti1-3/+4
2004-12-22chmod only filesmartti1-2/+2
2004-12-22Use ${SHAREMODE} instead of a-w with chmodmartti1-2/+2
2004-12-21Use ${VARBASE} instead of hardcoding /varmartti1-2/+2
2004-12-19s,PHP4,PHP, in COMMENT - this package doesn't specifically require PHP4jdolecek1-2/+2
2004-11-16Updated squirrelmail to 1.4.3anb1 (pkg/28328 by IYODA Atsushi)martti4-3/+37
There is a cross site scripting issue in the decoding of encoded text in certain headers. SquirrelMail correctly decodes the specially crafted header, but doesn't sanitize the decoded strings. http://article.gmane.org/gmane.mail.squirrelmail.user/21169
2004-10-31update DEPENDS for change of php4-* packages to php-*; be optimistic andjdolecek1-2/+2
leave the DEPENDS in a form which allows PHP 5.x to match, since it should work just as well
2004-06-04Forgot to remove this patch in previous.xtraeme1-14/+0
2004-06-04Update mail/squirrelmail to 1.4.3a.xtraeme2-7/+5
Version 1.4.3a - 2 June 2004 ---------------------------- - Fix typo in compose.php reply/reply to all quoting (#963499).
2004-06-02Ok, I know why the distinfo entry was wrong.bouyer2-11/+2
Remove $Id: $ from the patch, and regen distinfo.
2004-06-02Hum, not sure why but the patch-ab entry was wrong. Regen.bouyer1-2/+2
2004-06-02Add patch from squirrelmail repository:bouyer3-2/+27
"Fix typo in compose.php reply/reply to all quoting (#963499)." Without this, reply/reply all won't work when quoting a message. Bump PKGREVISION.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-31 01:34:22 +0000