Accepted squirrelmail 2:1.4.6-1 (source)

Ubuntu Installer archive at ubuntu.com
Thu Apr 6 18:08:35 BST 2006


Accepted:
 OK: squirrelmail_1.4.6-1.dsc
     -> Component: universe Section: web
 OK: squirrelmail_1.4.6.orig.tar.gz
 OK: squirrelmail_1.4.6-1.diff.gz

Origin: Debian/unstable
Format: 1.7
Date: Thu,  06 Apr 2006 18:01:11 +0100
Source: squirrelmail
Binary: squirrelmail
Architecture: source
Version: 2:1.4.6-1
Distribution: dapper
Urgency: high
Maintainer: Jeroen van Wolffelaar <jeroen at wolffelaar.nl>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 squirrelmail - Webmail for nuts
Closes: 279682 321565 330372 338649 354062 354063 354064 355424
Changes: 
 squirrelmail (2:1.4.6-1) unstable; urgency=high
 .
   * New upstream release.
   * Includes the following security fixes:
     - Fix IMAP command injection in sqimap_mailbox_select
       with upstream patch. [CVE-2006-0377] (Closes: #354063)
     - Fix possible XSS in MagicHTML, concerning the parsing
       of u\rl and comments in styles. Internet Explorer
       specific. [CVE-2006-0195] (Closes: #354062)
     - Fix possible cross site scripting through the right_main
       parameter of webmail.php. This now uses a whitelist of
       acceptable values. [CVE-2006-0188] (Closes: #354064, #355424)
 .
 squirrelmail (2:1.4.5+1.4.6rc1-1) experimental; urgency=low
 .
   * Experimental package
   * New upstream version: 1.4.6 Release Candidate 1
     Many bugfixes, amongst which the following Debian bugs:
     + Works with newest PHP versions (Closes: #321565, #338649).
     + Fixes line wrapping for unicode characters (Closes: #330372).
     + Add support for limiting the length of the From address display
       (Closes: #279682).
   * Add Depends alternatives for PHP5.
   * Add Suggests for squirrelmail-decode, the library with charset decoding
     functions for complex and rare character sets.
   * Upgrade debhelper compatibility to the recommended level 5.
   * Add Homepage to package description.
   * Move package building from the binary-arch to the binary-indep target
     in debian/rules.
Files: 
 f982571d61dcbf187c5247eaa3d6bd06 738 web optional squirrelmail_1.4.6-1.dsc
 da9e22416fca21ed0636458641187cdb 599318 web optional squirrelmail_1.4.6.orig.tar.gz
 d91d57f8b7a65c9600d04dea8ca6a227 17984 web optional squirrelmail_1.4.6-1.diff.gz





More information about the dapper-changes mailing list