Changes of Revision 55
roundcubemail.spec
Changed
x
1
2
%global basedir %{name}-%{rc_version}%{?dash_rel_suffix}
3
4
Name: roundcubemail
5
-Version: 1.5.8.2
6
+Version: 1.5.8.3
7
8
Release: 4%{?dot_rel_suffix}%{?dist}
9
10
debian.changelog
Changed
7
1
2
-roundcubemail (1.5.8.2-1~kolab1) unstable; urgency=low
3
+roundcubemail (1.5.8.3-1~kolab1) unstable; urgency=low
4
5
* New tarball
6
7
roundcubemail-1.5.tar.gz/CHANGELOG.md
Changed
12
1
2
3
## Unreleased
4
5
+- Fix regression where printing/scaling/rotating image attachments was broken (#9571)
6
+
7
+## Release 1.5.8
8
+
9
- Fix XSS vulnerability in post-processing of sanitized HTML content CVE-2024-42009
10
- Fix XSS vulnerability in serving of attachments other than HTML or SVG CVE-2024-42008
11
- Fix information leak (access to remote content) via insufficient CSS filtering CVE-2024-42010
12
roundcubemail-1.5.tar.gz/composer.lock
Changed
31
1
2
},
3
{
4
"name": "phpstan/phpstan",
5
- "version": "1.11.9",
6
+ "version": "1.11.10",
7
"source": {
8
"type": "git",
9
"url": "https://github.com/phpstan/phpstan.git",
10
- "reference": "e370bcddadaede0c1716338b262346f40d296f82"
11
+ "reference": "640410b32995914bde3eed26fa89552f9c2c082f"
12
},
13
"dist": {
14
"type": "zip",
15
- "url": "https://api.github.com/repos/phpstan/phpstan/zipball/e370bcddadaede0c1716338b262346f40d296f82",
16
- "reference": "e370bcddadaede0c1716338b262346f40d296f82",
17
+ "url": "https://api.github.com/repos/phpstan/phpstan/zipball/640410b32995914bde3eed26fa89552f9c2c082f",
18
+ "reference": "640410b32995914bde3eed26fa89552f9c2c082f",
19
"shasum": ""
20
},
21
"require": {
22
23
"type": "github"
24
}
25
,
26
- "time": "2024-08-01T16:25:18+00:00"
27
+ "time": "2024-08-08T09:02:50+00:00"
28
},
29
{
30
"name": "phpunit/php-code-coverage",
31
roundcubemail-1.5.tar.gz/logs/errors.log
Changed
16
1
2
-05-Aug-2024 07:25:46 UTC PHP Fatal error: Uncaught Error: Class 'PDO' not found in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php:134
3
+15-Aug-2024 12:04:44 UTC PHP Fatal error: Uncaught Error: Class 'PDO' not found in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php:134
4
Stack trace:
5
#0 /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/rcube_db.php(167): rcube_db_mysql->dsn_options(Array)
6
#1 /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/rcube_db.php(153): rcube_db->conn_create(Array)
7
8
#4 /tmp/roundcubemail-1.5/roundcubemail-1.5/vendor/bin/rcubeinitdb.sh(115): include('/tmp/roundcubem...')
9
#5 {main}
10
thrown in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php on line 134
11
-05-Aug-2024 07:25:46 UTC PHP Fatal error: Uncaught Error: Class 'PDO' not found in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php:134
12
+15-Aug-2024 12:04:44 UTC PHP Fatal error: Uncaught Error: Class 'PDO' not found in /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/db/mysql.php:134
13
Stack trace:
14
#0 /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/rcube_db.php(167): rcube_db_mysql->dsn_options(Array)
15
#1 /tmp/roundcubemail-1.5/roundcubemail-1.5/program/lib/Roundcube/rcube_db.php(153): rcube_db->conn_create(Array)
16
roundcubemail-1.5.tar.gz/program/js/app.js
Changed
41
1
2
var contents = $(this).contents();
3
4
// do not apply styles to an error page (with no image)
5
- if (contents.find('img').length)
6
- contents.find('head').append(
7
- '<style type="text/css">'
8
- + 'img { max-width:100%; max-height:100%; } ' // scale
9
- + 'body { display:flex; align-items:center; justify-content:center; height:100%; margin:0; }' // align
10
- + '</style>'
11
- );
12
+ if (contents.find('img').length) {
13
+ contents.find('img').css({ maxWidth: '100%', maxHeight: '100%' });
14
+ contents.find('body').css({ display: 'flex', alignItems: 'center', justifyContent: 'center', height: '100%', margin: 0 });
15
+ contents.find('html').css({ height: '100%' });
16
+ }
17
});
18
}
19
// show printing dialog unless decryption must be done first
20
21
this.apply_image_style = function()
22
{
23
var style = ,
24
- head = $(this.gui_objects.messagepartframe).contents().find('head');
25
-
26
- $('#image-style', head).remove();
27
+ img = $(this.gui_objects.messagepartframe).contents().find('img');
28
29
$.each({scale: '', rotate: 'deg'}, function(i, v) {
30
var val = ref.image_stylei;
31
32
style.push(i + '(' + val + v + ')');
33
});
34
35
- if (style)
36
- head.append($('<style id="image-style">').text('img { transform: ' + style.join(' ') + '}'));
37
+ img.css('transform', style.join(' '));
38
};
39
40
// Update import dialog state
41
roundcubemail-1.5.tar.gz/program/lib/Roundcube/rcube_output.php
Changed
11
1
2
}
3
4
// Use strict security policy to make sure no javascript content is executed
5
- header("Content-Security-Policy: default-src 'none'");
6
+ // img-src is needed to be able to print attachment preview page
7
+ header("Content-Security-Policy: default-src 'none'; img-src 'self'");
8
9
// don't kill the connection if download takes more than 30 sec.
10
if (!array_key_exists('time_limit', $params)) {
11
roundcubemail-1.5.tar.gz/vendor/composer/installed.json
Changed
33
1
2
},
3
{
4
"name": "phpstan/phpstan",
5
- "version": "1.11.9",
6
- "version_normalized": "1.11.9.0",
7
+ "version": "1.11.10",
8
+ "version_normalized": "1.11.10.0",
9
"source": {
10
"type": "git",
11
"url": "https://github.com/phpstan/phpstan.git",
12
- "reference": "e370bcddadaede0c1716338b262346f40d296f82"
13
+ "reference": "640410b32995914bde3eed26fa89552f9c2c082f"
14
},
15
"dist": {
16
"type": "zip",
17
- "url": "https://api.github.com/repos/phpstan/phpstan/zipball/e370bcddadaede0c1716338b262346f40d296f82",
18
- "reference": "e370bcddadaede0c1716338b262346f40d296f82",
19
+ "url": "https://api.github.com/repos/phpstan/phpstan/zipball/640410b32995914bde3eed26fa89552f9c2c082f",
20
+ "reference": "640410b32995914bde3eed26fa89552f9c2c082f",
21
"shasum": ""
22
},
23
"require": {
24
25
"conflict": {
26
"phpstan/phpstan-shim": "*"
27
},
28
- "time": "2024-08-01T16:25:18+00:00",
29
+ "time": "2024-08-08T09:02:50+00:00",
30
"bin":
31
"phpstan",
32
"phpstan.phar"
33
roundcubemail-1.5.tar.gz/vendor/composer/installed.php
Changed
32
1
2
'name' => 'roundcube/roundcubemail',
3
'pretty_version' => 'dev-dev/kolab-1.5',
4
'version' => 'dev-dev/kolab-1.5',
5
- 'reference' => 'a421c85b0407fbbb0cf44250eb6d35a772ed5c61',
6
+ 'reference' => 'c8c584b97bb38604283de338d3a4ed05d92dd346',
7
'type' => 'library',
8
'install_path' => __DIR__ . '/../../',
9
'aliases' => array(),
10
11
'dev_requirement' => true,
12
),
13
'phpstan/phpstan' => array(
14
- 'pretty_version' => '1.11.9',
15
- 'version' => '1.11.9.0',
16
- 'reference' => 'e370bcddadaede0c1716338b262346f40d296f82',
17
+ 'pretty_version' => '1.11.10',
18
+ 'version' => '1.11.10.0',
19
+ 'reference' => '640410b32995914bde3eed26fa89552f9c2c082f',
20
'type' => 'library',
21
'install_path' => __DIR__ . '/../phpstan/phpstan',
22
'aliases' => array(),
23
24
'roundcube/roundcubemail' => array(
25
'pretty_version' => 'dev-dev/kolab-1.5',
26
'version' => 'dev-dev/kolab-1.5',
27
- 'reference' => 'a421c85b0407fbbb0cf44250eb6d35a772ed5c61',
28
+ 'reference' => 'c8c584b97bb38604283de338d3a4ed05d92dd346',
29
'type' => 'library',
30
'install_path' => __DIR__ . '/../../',
31
'aliases' => array(),
32
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/index
Changed
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/logs/HEAD
Changed
8
1
2
-0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000 clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
3
-39a754269fe6e5d94b0fe87215e89232876bda01 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000 checkout: moving from master to master
4
-39a754269fe6e5d94b0fe87215e89232876bda01 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000 reset: moving to 39a754269fe6e5d94b0fe87215e89232876bda01
5
+0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000 clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
6
+39a754269fe6e5d94b0fe87215e89232876bda01 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000 checkout: moving from master to master
7
+39a754269fe6e5d94b0fe87215e89232876bda01 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000 reset: moving to 39a754269fe6e5d94b0fe87215e89232876bda01
8
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/logs/refs/heads/master
Changed
4
1
2
-0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000 clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
3
+0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000 clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
4
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/logs/refs/remotes/origin/HEAD
Changed
4
1
2
-0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@fcf75113087d.(none)> 1722842746 +0000 clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
3
+0000000000000000000000000000000000000000 39a754269fe6e5d94b0fe87215e89232876bda01 default <default@ac31e212d3f1.(none)> 1723723484 +0000 clone: from /home/default/.cache/composer/vcs/https---git.kolab.org-diffusion-PNL-php-net-ldap.git/
4
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/info/packs
Changed
5
1
2
-P pack-cd818dc721b0bfe14b5d34b491e4262497e4dffd.pack
3
+P pack-b903dfabddcecea2bc9abd0b95567a155cd7b86d.pack
4
5
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-b903dfabddcecea2bc9abd0b95567a155cd7b86d.idx
Added
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-b903dfabddcecea2bc9abd0b95567a155cd7b86d.pack
Added
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-b903dfabddcecea2bc9abd0b95567a155cd7b86d.rev
Added
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-cd818dc721b0bfe14b5d34b491e4262497e4dffd.idx
Deleted
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-cd818dc721b0bfe14b5d34b491e4262497e4dffd.pack
Deleted
roundcubemail-1.5.tar.gz/vendor/kolab/net_ldap3/.git/objects/pack/pack-cd818dc721b0bfe14b5d34b491e4262497e4dffd.rev
Deleted
roundcubemail-1.5.tar.gz/vendor/phpstan/phpstan/phpstan.phar
Changed
roundcubemail-1.5.tar.gz/vendor/phpstan/phpstan/phpstan.phar.asc
Changed
31
1
2
-----BEGIN PGP SIGNATURE-----
3
4
-iQIzBAABCgAdFiEEynwsejDI6OEnSoR2UcZzBf/C5cAFAmarttIACgkQUcZzBf/C
5
-5cBUzRAAmr7H1g66xJk6hko869NGEztBORKSuL75lWYyCGaHIhjWFoedV6GC+EO+
6
-QGdLRWO+WmUt8J0Owc1ghoLNdCrFUgh2jJId7aopceLWCQxGZJ45HWsIa/aQkt74
7
-BJ2nepGDaWYBIrrmcbnMIxxbj41Z81oD8gSkykOmaxAgDJpBiUw+meciSNBrbb/I
8
-lyJhMKN6ZYhmeYvioPtM1uHIaZ7FDLzzMF8TlcoPf4Z0DFyRkPMS7mtZ/cHK3juM
9
-HX4tTgDyJmVzNJyUbtjQHGuuHNMQk75a3h8PqwmOt/+szTaEiok0greD9hdVfrLN
10
-gCP1OWpuIx6WmZRheHEb+0yjEl+DPSeTphmNa2zfUUXquFpFcMbgrzyYi3gLDhvs
11
-HP0g3iaInq0JysAAzATPJZDFY2eVrAohm5lNigKKp94S7d+qSUvL4EofFAzVhT4v
12
-NkrI2GYXCW47dJDAhdvf1sNgsP4tSYChDF57yDkPXgDZJTHsHOqxkHYYTTACS+oJ
13
-Ryhovz1CbB8Bqe6g6oHfjwF4v4WYcCQLtOVSIUTT1i/AoNt4sWLSOk1iwrJq8Zex
14
-IqnRj/iQsquHxAYsMP5hMWCa3MiDUKha1OByS7a5lJXz94RRh+RuCt7YP1N4A0kf
15
-zCUhdXapQq3JswUmYWlokTuwdFe0DQwlAW1u7zqSUD0DAIZi6Yk=
16
-=0AQP
17
+iQIzBAABCgAdFiEEynwsejDI6OEnSoR2UcZzBf/C5cAFAma0iZ8ACgkQUcZzBf/C
18
+5cBohA//bMVrbkx6MXbgAGRDLfFwfw+yIh0eXtYppHNcIH55RznSH5IMuZmnC+aj
19
+8pXRSG38zf/69PZU82iaBwPIUJr2QLFeUe0E+2us6zJ81o3ifVuwqE27IQ2u4vCB
20
+JehufifJRc9ewHCTTvyibIM3IpRCKnc6PsmixBo98BD/aqp1rJKQJscdQcgW5nbq
21
+Ah6h62j1WqfJvspE6s0jegnCNoaf4ir83u3QJ5e63y7TuV+8Bxzx+co2XjYlBX5h
22
+j3Es6fOS4fGVQh5aLX6VYiLJcPPvHMOQJPzMmqqbqc10RRp9i9ASAxQpgwVL7vBe
23
+Pxc+ArPIylTSs5nD5zhURp0v6TReNONMfRa+xYE+AoQloFm9g1KtxscBjqvdLWPo
24
+0+mDDsCMPS/Bj+UB7dUVjvXCrSqhdh35tfXiM2v0W50hDnDsjBxtLln7f5jwPfvy
25
++NnIxkFG3PFJZa0EtEnKcmBvX6zlkvNUSlR22rp7jNaNn5yrH5/1kcGSKHD9bbKb
26
+ssVcYhMkAZGA+IpOVY0kjsG3f0ItD8Y85QMN1zo5CUwDtK9hdXA0p3+a/muQd1f5
27
+IfCaME2P6I9CGAuXGPhERhbAoKnSrpBkiKVbBE+m8AP0RxjVL0IQXhxM69CaIScc
28
+qpG852WUX/pQAA36va3CWJiC6EJ+EiJ+5v6H6moxIJq4obiGWyY=
29
+=ztg6
30
-----END PGP SIGNATURE-----
31
roundcubemail.dsc
Changed
10
1
2
Source: roundcubemail
3
Binary: roundcubemail
4
Architecture: all
5
-Version: 1:1.5.8.2-1~kolab1
6
+Version: 1:1.5.8.3-1~kolab1
7
Maintainer: Jeroen van Meeuwen <vanmeeuwen@kolabsys.com>
8
Uploaders: Jeroen van Meeuwen <vanmeeuwen@kolabsys.com>
9
Homepage: http://www.roundcube.net/
10