Changes of Revision 55

roundcubemail.spec Changed
x
 
1
@@ -57,7 +57,7 @@
2
 %global basedir %{name}-%{rc_version}%{?dash_rel_suffix}
3
 
4
 Name:           roundcubemail
5
-Version: 1.5.8.2
6
+Version: 1.5.8.3
7
 
8
 Release:        4%{?dot_rel_suffix}%{?dist}
9
 
10
debian.changelog Changed
7
 
1
@@ -1,4 +1,4 @@
2
-roundcubemail (1.5.8.2-1~kolab1) unstable; urgency=low
3
+roundcubemail (1.5.8.3-1~kolab1) unstable; urgency=low
4
 
5
   * New tarball
6
 
7
roundcubemail-1.5.tar.gz/CHANGELOG.md Changed
12
 
1
@@ -2,6 +2,10 @@
2
 
3
 ## Unreleased
4
 
5
+- Fix regression where printing/scaling/rotating image attachments was broken (#9571)
6
+
7
+## Release 1.5.8
8
+
9
 - Fix XSS vulnerability in post-processing of sanitized HTML content CVE-2024-42009
10
 - Fix XSS vulnerability in serving of attachments other than HTML or SVG CVE-2024-42008
11
 - Fix information leak (access to remote content) via insufficient CSS filtering CVE-2024-42010
12
roundcubemail-1.5.tar.gz/composer.lock Changed
31
 
1
@@ -4993,16 +4993,16 @@
2
         },
3
         {
4
             "name": "phpstan/phpstan",
5
-            "version": "1.11.9",
6
+            "version": "1.11.10",
7
             "source": {
8
                 "type": "git",
9
                 "url": "https://github.com/phpstan/phpstan.git",
10
-                "reference": "e370bcddadaede0c1716338b262346f40d296f82"
11
+                "reference": "640410b32995914bde3eed26fa89552f9c2c082f"
12
             },
13
             "dist": {
14
                 "type": "zip",
15
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/e370bcddadaede0c1716338b262346f40d296f82",
16
-                "reference": "e370bcddadaede0c1716338b262346f40d296f82",
17
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/640410b32995914bde3eed26fa89552f9c2c082f",
18
+                "reference": "640410b32995914bde3eed26fa89552f9c2c082f",
19
                 "shasum": ""
20
             },
21
             "require": {
22
@@ -5047,7 +5047,7 @@
23
                     "type": "github"
24
                 }
25
             ,
26
-            "time": "2024-08-01T16:25:18+00:00"
27
+            "time": "2024-08-08T09:02:50+00:00"
28
         },
29
         {
30
             "name": "phpunit/php-code-coverage",
31
roundcubemail-1.5.tar.gz/logs/errors.log Changed
16
 
1
@@ -1,4 +1,4 @@
2
-05-Aug-2024 07:25:46 UTC PHP Fatal error:  Uncaught Error: Class 'PDO' not found in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php:134
3
+15-Aug-2024 12:04:44 UTC PHP Fatal error:  Uncaught Error: Class 'PDO' not found in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php:134
4
 Stack trace:
5
 #0 /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/rcube_db.php(167): rcube_db_mysql->dsn_options(Array)
6
 #1 /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/rcube_db.php(153): rcube_db->conn_create(Array)
7
@@ -7,7 +7,7 @@
8
 #4 /tmp/roundcubemail-1.5/roundcubemail-1.5/vendor/bin/rcubeinitdb.sh(115): include('/tmp/roundcubem...')
9
 #5 {main}
10
   thrown in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php on line 134
11
-05-Aug-2024 07:25:46 UTC PHP Fatal error:  Uncaught Error: Class 'PDO' not found in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php:134
12
+15-Aug-2024 12:04:44 UTC PHP Fatal error:  Uncaught Error: Class 'PDO' not found in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php:134
13
 Stack trace:
14
 #0 /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/rcube_db.php(167): rcube_db_mysql->dsn_options(Array)
15
 #1 /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/rcube_db.php(153): rcube_db->conn_create(Array)
16
roundcubemail-1.5.tar.gz/program/js/app.js Changed
41
 
1
@@ -426,13 +426,11 @@
2
               var contents = $(this).contents();
3
 
4
               // do not apply styles to an error page (with no image)
5
-              if (contents.find('img').length)
6
-                contents.find('head').append(
7
-                  '<style type="text/css">'
8
-                  + 'img { max-width:100%; max-height:100%; } ' // scale
9
-                  + 'body { display:flex; align-items:center; justify-content:center; height:100%; margin:0; }' // align
10
-                  + '</style>'
11
-                );
12
+              if (contents.find('img').length) {
13
+                contents.find('img').css({ maxWidth: '100%', maxHeight: '100%' });
14
+                contents.find('body').css({ display: 'flex', alignItems: 'center', justifyContent: 'center', height: '100%', margin: 0 });
15
+                contents.find('html').css({ height: '100%' });
16
+              }
17
             });
18
         }
19
         // show printing dialog unless decryption must be done first
20
@@ -5813,9 +5811,7 @@
21
   this.apply_image_style = function()
22
   {
23
     var style = ,
24
-      head = $(this.gui_objects.messagepartframe).contents().find('head');
25
-
26
-    $('#image-style', head).remove();
27
+      img = $(this.gui_objects.messagepartframe).contents().find('img');
28
 
29
     $.each({scale: '', rotate: 'deg'}, function(i, v) {
30
       var val = ref.image_stylei;
31
@@ -5823,8 +5819,7 @@
32
         style.push(i + '(' + val + v + ')');
33
     });
34
 
35
-    if (style)
36
-      head.append($('<style id="image-style">').text('img { transform: ' + style.join(' ') + '}'));
37
+    img.css('transform', style.join(' '));
38
   };
39
 
40
   // Update import dialog state
41
roundcubemail-1.5.tar.gz/program/lib/Roundcube/rcube_output.php Changed
11
 
1
@@ -286,7 +286,8 @@
2
         }
3
 
4
         // Use strict security policy to make sure no javascript content is executed
5
-        header("Content-Security-Policy: default-src 'none'");
6
+        // img-src is needed to be able to print attachment preview page
7
+        header("Content-Security-Policy: default-src 'none'; img-src 'self'");
8
 
9
         // don't kill the connection if download takes more than 30 sec.
10
         if (!array_key_exists('time_limit', $params)) {
11
roundcubemail-1.5.tar.gz/vendor/composer/installed.json Changed
33
 
1
@@ -3187,17 +3187,17 @@
2
         },
3
         {
4
             "name": "phpstan/phpstan",
5
-            "version": "1.11.9",
6
-            "version_normalized": "1.11.9.0",
7
+            "version": "1.11.10",
8
+            "version_normalized": "1.11.10.0",
9
             "source": {
10
                 "type": "git",
11
                 "url": "https://github.com/phpstan/phpstan.git",
12
-                "reference": "e370bcddadaede0c1716338b262346f40d296f82"
13
+                "reference": "640410b32995914bde3eed26fa89552f9c2c082f"
14
             },
15
             "dist": {
16
                 "type": "zip",
17
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/e370bcddadaede0c1716338b262346f40d296f82",
18
-                "reference": "e370bcddadaede0c1716338b262346f40d296f82",
19
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/640410b32995914bde3eed26fa89552f9c2c082f",
20
+                "reference": "640410b32995914bde3eed26fa89552f9c2c082f",
21
                 "shasum": ""
22
             },
23
             "require": {
24
@@ -3206,7 +3206,7 @@
25
             "conflict": {
26
                 "phpstan/phpstan-shim": "*"
27
             },
28
-            "time": "2024-08-01T16:25:18+00:00",
29
+            "time": "2024-08-08T09:02:50+00:00",
30
             "bin": 
31
                 "phpstan",
32
                 "phpstan.phar"
33
roundcubemail-1.5.tar.gz/vendor/composer/installed.php Changed
32
 
1
@@ -3,7 +3,7 @@
2
         'name' => 'roundcube/roundcubemail',
3
         'pretty_version' => 'dev-dev/kolab-1.5',
4
         'version' => 'dev-dev/kolab-1.5',
5
-        'reference' => 'a421c85b0407fbbb0cf44250eb6d35a772ed5c61',
6
+        'reference' => 'c8c584b97bb38604283de338d3a4ed05d92dd346',
7
         'type' => 'library',
8
         'install_path' => __DIR__ . '/../../',
9
         'aliases' => array(),
10
@@ -534,9 +534,9 @@
11
             'dev_requirement' => true,
12
         ),
13
         'phpstan/phpstan' => array(
14
-            'pretty_version' => '1.11.9',
15
-            'version' => '1.11.9.0',
16
-            'reference' => 'e370bcddadaede0c1716338b262346f40d296f82',
17
+            'pretty_version' => '1.11.10',
18
+            'version' => '1.11.10.0',
19
+            'reference' => '640410b32995914bde3eed26fa89552f9c2c082f',
20
             'type' => 'library',
21
             'install_path' => __DIR__ . '/../phpstan/phpstan',
22
             'aliases' => array(),
23
@@ -665,7 +665,7 @@
24
         'roundcube/roundcubemail' => array(
25
             'pretty_version' => 'dev-dev/kolab-1.5',
26
             'version' => 'dev-dev/kolab-1.5',
27
-            'reference' => 'a421c85b0407fbbb0cf44250eb6d35a772ed5c61',
28
+            'reference' => 'c8c584b97bb38604283de338d3a4ed05d92dd346',
29
             'type' => 'library',
30
             'install_path' => __DIR__ . '/../../',
31
             'aliases' => array(),
32
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/index Changed
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/logs/HEAD Changed
8
 
1
@@ -1,3 +1,3 @@
2
-0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000   clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
3
-39a754269fe6e5d94b0fe87215e89232876bda01 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000   checkout: moving from master to master
4
-39a754269fe6e5d94b0fe87215e89232876bda01 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000   reset: moving to 39a754269fe6e5d94b0fe87215e89232876bda01
5
+0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000   clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
6
+39a754269fe6e5d94b0fe87215e89232876bda01 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000   checkout: moving from master to master
7
+39a754269fe6e5d94b0fe87215e89232876bda01 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000   reset: moving to 39a754269fe6e5d94b0fe87215e89232876bda01
8
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/logs/refs/heads/master Changed
4
 
1
@@ -1,1 +1,1 @@
2
-0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000   clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
3
+0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000   clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
4
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/logs/refs/remotes/origin/HEAD Changed
4
 
1
@@ -1,1 +1,1 @@
2
-0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000   clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
3
+0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000   clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
4
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/info/packs Changed
5
 
1
@@ -1,2 +1,2 @@
2
-P pack-cd818dc721b0bfe14b5d34b491e4262497e4dffd.pack
3
+P pack-b903dfabddcecea2bc9abd0b95567a155cd7b86d.pack
4
 
5
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-b903dfabddcecea2bc9abd0b95567a155cd7b86d.idx Added
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-b903dfabddcecea2bc9abd0b95567a155cd7b86d.pack Added
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-b903dfabddcecea2bc9abd0b95567a155cd7b86d.rev Added
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-cd818dc721b0bfe14b5d34b491e4262497e4dffd.idx Deleted
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-cd818dc721b0bfe14b5d34b491e4262497e4dffd.pack Deleted
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-cd818dc721b0bfe14b5d34b491e4262497e4dffd.rev Deleted
roundcubemail-1.5.tar.gz/vendor/phpstan/phpstan/phpstan.phar Changed
roundcubemail-1.5.tar.gz/vendor/phpstan/phpstan/phpstan.phar.asc Changed
31
 
1
@@ -1,16 +1,16 @@
2
 -----BEGIN PGP SIGNATURE-----
3
 
4
-iQIzBAABCgAdFiEEynwsejDI6OEnSoR2UcZzBf/C5cAFAmarttIACgkQUcZzBf/C
5
-5cBUzRAAmr7H1g66xJk6hko869NGEztBORKSuL75lWYyCGaHIhjWFoedV6GC+EO+
6
-QGdLRWO+WmUt8J0Owc1ghoLNdCrFUgh2jJId7aopceLWCQxGZJ45HWsIa/aQkt74
7
-BJ2nepGDaWYBIrrmcbnMIxxbj41Z81oD8gSkykOmaxAgDJpBiUw+meciSNBrbb/I
8
-lyJhMKN6ZYhmeYvioPtM1uHIaZ7FDLzzMF8TlcoPf4Z0DFyRkPMS7mtZ/cHK3juM
9
-HX4tTgDyJmVzNJyUbtjQHGuuHNMQk75a3h8PqwmOt/+szTaEiok0greD9hdVfrLN
10
-gCP1OWpuIx6WmZRheHEb+0yjEl+DPSeTphmNa2zfUUXquFpFcMbgrzyYi3gLDhvs
11
-HP0g3iaInq0JysAAzATPJZDFY2eVrAohm5lNigKKp94S7d+qSUvL4EofFAzVhT4v
12
-NkrI2GYXCW47dJDAhdvf1sNgsP4tSYChDF57yDkPXgDZJTHsHOqxkHYYTTACS+oJ
13
-Ryhovz1CbB8Bqe6g6oHfjwF4v4WYcCQLtOVSIUTT1i/AoNt4sWLSOk1iwrJq8Zex
14
-IqnRj/iQsquHxAYsMP5hMWCa3MiDUKha1OByS7a5lJXz94RRh+RuCt7YP1N4A0kf
15
-zCUhdXapQq3JswUmYWlokTuwdFe0DQwlAW1u7zqSUD0DAIZi6Yk=
16
-=0AQP
17
+iQIzBAABCgAdFiEEynwsejDI6OEnSoR2UcZzBf/C5cAFAma0iZ8ACgkQUcZzBf/C
18
+5cBohA//bMVrbkx6MXbgAGRDLfFwfw+yIh0eXtYppHNcIH55RznSH5IMuZmnC+aj
19
+8pXRSG38zf/69PZU82iaBwPIUJr2QLFeUe0E+2us6zJ81o3ifVuwqE27IQ2u4vCB
20
+JehufifJRc9ewHCTTvyibIM3IpRCKnc6PsmixBo98BD/aqp1rJKQJscdQcgW5nbq
21
+Ah6h62j1WqfJvspE6s0jegnCNoaf4ir83u3QJ5e63y7TuV+8Bxzx+co2XjYlBX5h
22
+j3Es6fOS4fGVQh5aLX6VYiLJcPPvHMOQJPzMmqqbqc10RRp9i9ASAxQpgwVL7vBe
23
+Pxc+ArPIylTSs5nD5zhURp0v6TReNONMfRa+xYE+AoQloFm9g1KtxscBjqvdLWPo
24
+0+mDDsCMPS/Bj+UB7dUVjvXCrSqhdh35tfXiM2v0W50hDnDsjBxtLln7f5jwPfvy
25
++NnIxkFG3PFJZa0EtEnKcmBvX6zlkvNUSlR22rp7jNaNn5yrH5/1kcGSKHD9bbKb
26
+ssVcYhMkAZGA+IpOVY0kjsG3f0ItD8Y85QMN1zo5CUwDtK9hdXA0p3+a/muQd1f5
27
+IfCaME2P6I9CGAuXGPhERhbAoKnSrpBkiKVbBE+m8AP0RxjVL0IQXhxM69CaIScc
28
+qpG852WUX/pQAA36va3CWJiC6EJ+EiJ+5v6H6moxIJq4obiGWyY=
29
+=ztg6
30
 -----END PGP SIGNATURE-----
31
roundcubemail.dsc Changed
10
 
1
@@ -2,7 +2,7 @@
2
 Source: roundcubemail
3
 Binary: roundcubemail
4
 Architecture: all
5
-Version: 1:1.5.8.2-1~kolab1
6
+Version: 1:1.5.8.3-1~kolab1
7
 Maintainer: Jeroen van Meeuwen <vanmeeuwen@kolabsys.com>
8
 Uploaders: Jeroen van Meeuwen <vanmeeuwen@kolabsys.com>
9
 Homepage: http://www.roundcube.net/
10