1 roundcube (0.7.2-6) unstable; urgency=low
3 * Fix the symlink mess in postinst when upgrading from 0.5 to a more
4 recent version. Closes: #680917, #656886.
6 -- Vincent Bernat <bernat@debian.org> Sat, 10 Nov 2012 13:51:17 +0100
8 roundcube (0.7.2-5) unstable; urgency=low
10 * Fix problem with some uuencoded attachments. Patch from Michał
11 Mirosław. Closes: #686857.
12 * Don't handle old configuration files from legacy roundcube
13 package. roundcube package is an empty metapackage since
14 Squeeze. Closes: #688230.
16 -- Vincent Bernat <bernat@debian.org> Sat, 29 Sep 2012 11:39:07 +0200
18 roundcube (0.7.2-4) unstable; urgency=high
20 * Fix self XSS with plain signatures. CVE-2012-3508. Closes: #685475.
22 -- Vincent Bernat <bernat@debian.org> Sun, 26 Aug 2012 14:20:24 +0200
24 roundcube (0.7.2-3) unstable; urgency=low
26 * Remove old Replaces/Breaks for roundcube-core since it is not needed
28 * Add back roundcube-sqlite package as a transitional package, thanks to
29 a suggestion by Andreas Beckmann. This enables one to upgrade from
30 Squeeze. Closes: #677803.
31 * Move the actual NEWS entry about dropping SQLite to the transitional
32 package. And be more verbose about it.
34 -- Vincent Bernat <bernat@debian.org> Sat, 23 Jun 2012 19:52:33 +0200
36 roundcube (0.7.2-2) unstable; urgency=low
38 * Rotate /var/log/roundcube/session. Closes: #671472.
39 * Fix rights of files generated by UCF. Closes: #671474.
40 * Update Slovak debconf translation, thanks to Ivan Masár (Closes: #677907).
42 -- Vincent Bernat <bernat@debian.org> Tue, 19 Jun 2012 08:30:20 +0200
44 roundcube (0.7.2-1) unstable; urgency=low
46 * New upstream version.
47 * Bump Standards-Version. No changes required.
48 * Depends on php-mail-mime (>= 1.8.2). Closes: #656243.
50 -- Vincent Bernat <bernat@debian.org> Sat, 28 Apr 2012 10:29:15 +0200
52 roundcube (0.7.1-2) unstable; urgency=high
54 * Remove roundcube-sqlite package since php5 package does not ship
55 SQLite 2.x support anymore. Roundcube is incompatible with SQLite 3.x.
57 * Urgency set to high for php5 migration into testing.
59 -- Vincent Bernat <bernat@debian.org> Tue, 07 Feb 2012 17:37:52 +0100
61 roundcube (0.7.1-1) unstable; urgency=low
63 * New upstream version. Closes: #656093.
64 * Add Dutch debconf translation, thanks to Jeroen Schot.
67 -- Vincent Bernat <bernat@debian.org> Tue, 17 Jan 2012 08:57:11 +0100
69 roundcube (0.7-3) unstable; urgency=low
71 * Ship jqueryui plugin. Closes: #653274.
72 + Depend on libjs-jquery-ui package (instead of builtin copy).
73 + Conflict with versions of roundcube-plugins-extra providing this
75 * More SQL fixes on update. Closes: #654297.
77 -- Vincent Bernat <bernat@debian.org> Mon, 02 Jan 2012 21:45:42 +0100
79 roundcube (0.7-2) unstable; urgency=low
81 * Fix SQLite upgrade file. Closes: #653217.
82 * Also fixes MySQL upgrade file and SQLite regular file.
84 -- Vincent Bernat <bernat@debian.org> Sun, 25 Dec 2011 16:14:04 +0100
86 roundcube (0.7-1) unstable; urgency=low
88 * New upstream version. Closes: #652564.
89 + Does not ship SWF with TinyMCE anymore.
91 -- Vincent Bernat <bernat@debian.org> Fri, 23 Dec 2011 22:04:39 +0100
93 roundcube (0.6+dfsg-1) unstable; urgency=low
95 * New upstream version. Closes: #643707.
96 + Repack to remove SWF file without source from TinyMCE.
97 + Add SQL upgrade procedures.
98 + Add new plugins: acl, enigma and newmail_notifier.
99 + Update jQuery dependency to jQuery 1.6.4.
101 -- Vincent Bernat <bernat@debian.org> Sun, 02 Oct 2011 15:20:57 +0200
103 roundcube (0.5.4+dfsg-1) unstable; urgency=high
106 * New upstream version.
107 + Fix XSS vulnerability in UI messages (Closes: #641996).
108 * Switch to Git for version control thanks to Jérémy
109 Bobbio. debian/control updated.
110 * Ship INSTALL. Closes: #633698.
113 * Re-add 'password' plugin to roundcube-plugins.
115 -- Vincent Bernat <bernat@debian.org> Wed, 13 Jul 2011 08:33:01 +0200
117 roundcube (0.5.3+dfsg-1) unstable; urgency=low
119 * New upstream release.
120 + Fix identities "reply-to" and "bcc" fields have a bogus value when
121 left empty (Closes: #628553).
123 -- Vincent Bernat <bernat@debian.org> Fri, 10 Jun 2011 22:48:57 +0200
125 roundcube (0.5.2+dfsg-1) unstable; urgency=low
127 * New upstream release
128 * Update logrotate configuration. Closes: #619410.
129 * Make debian-db.php owned by root. This really closes: #608976.
130 * Bump Standards-Version. No changes required.
132 -- Vincent Bernat <bernat@debian.org> Sun, 24 Apr 2011 00:35:34 +0200
134 roundcube (0.5.1+dfsg-7) unstable; urgency=low
136 * Make dbconfig-common use sqlite by default to ensure that the package
137 can be configured non-interactively in most cases. Closes: #617754.
139 -- Vincent Bernat <bernat@debian.org> Fri, 11 Mar 2011 09:08:32 +0100
141 roundcube (0.5.1+dfsg-6) unstable; urgency=low
143 * Handle incorrect upgrade from 0.3.1-6 when "changed" column already
144 exists for table "identities". Closes: #617312.
146 -- Vincent Bernat <bernat@debian.org> Tue, 08 Mar 2011 07:37:56 +0100
148 roundcube (0.5.1+dfsg-5) unstable; urgency=low
150 * Don't use awk. Use plain shell to modify main.inc.php.
153 -- Vincent Bernat <bernat@debian.org> Fri, 04 Mar 2011 20:46:57 +0100
155 roundcube (0.5.1+dfsg-4) unstable; urgency=low
157 * Fix debian/watch to remove "+dfsg" suffix.
158 * Use awk instead of sed to modify main.inc.php. Closes: #615277.
160 -- Vincent Bernat <bernat@debian.org> Tue, 01 Mar 2011 19:59:00 +0100
162 roundcube (0.5.1+dfsg-3) unstable; urgency=low
164 * Install show_additional_headers plugin in roundcube-plugins package.
165 * Use dbconfig-common to force some upgrade commands using some ugly
166 hacks. This should fix any remaining problems with MySQL
167 upgrade. Closes: #613586.
169 -- Vincent Bernat <bernat@debian.org> Fri, 18 Feb 2011 22:04:12 +0100
171 roundcube (0.5.1+dfsg-2) unstable; urgency=low
173 * Remove all "ADD INDEX" from MySQL 0.5-1 upgrade file and put them in
174 postinst script. If you have a problem during the upgrade, please, let
175 me know. This upload is only done to prevent users who did not upgrade
176 to 0.5 yet to have a problem during their upgrade. If you already
177 upgraded to 0.5 and if the upgrade failed (or if some feature are
178 missing like identities management), please look at bug #613586.
180 -- Vincent Bernat <bernat@debian.org> Wed, 16 Feb 2011 20:54:48 +0100
182 roundcube (0.5.1+dfsg-1) unstable; urgency=low
184 * Add plugins. Closes: #550454.
185 * Rewrite (and update) of debian/copyright.
186 * Use of yui-compressor to re-minify Javascript files.
187 * Drop correct-magic-path.patch: libmagic1 now provides a symlink to the
188 correct location since 4.24-4.
189 * Repack orig.tar.gz to remove swf file shipped with TinyMCE with no
192 -- Vincent Bernat <bernat@debian.org> Mon, 14 Feb 2011 22:33:51 +0100
194 roundcube (0.5.1-1) unstable; urgency=low
196 * New upstream version. Some bugs are corrected in this release or in a
198 + when switching to HTML mode, content type is now correctly set.
200 + header delimiters handling has been fixed in 0.5.
202 * Don't assign "skins" directory to www-data. Closes: #612552.
203 * Add instructions on how to install and upgrade when not using
204 dbconfig-common. We do not ship UPGRADING file any more since it is
205 misleading. Closes: #612511.
206 * Fix MySQL indexes if upgrading from 0.5-2 or lesser. Closes: #610725.
207 * Rework how symlinks work. The only directory to use is
208 /var/lib/roundcube. We use symlink from /usr/share/roundcube to
209 /var/lib/roundcube and not the other way. Moreover, plugins and skins
210 are also symlinked. A user should be able to add plugins and skins in
211 /var/lib/roundcube while default ones are in
212 /usr/share/roundcube. Closes: #612553.
214 -- Vincent Bernat <bernat@debian.org> Wed, 09 Feb 2011 07:32:42 +0100
216 roundcube (0.5-2) experimental; urgency=low
218 * If 0.3.1 was installed from scratch, upgrade does not work on MySQL
219 and PostgreSQL because we try to create an index which already
220 exists. With SQLite, the error is ignored, no fix needed. When using
221 PostgreSQL, fix this by dropping the index if it already
222 exists. Nothing similar seems to exist with MySQL. Therefore, just
223 don't create the index. We need to handle this later. See bug
224 #610725. Not closing.
226 -- Vincent Bernat <bernat@debian.org> Fri, 21 Jan 2011 21:44:05 +0100
228 roundcube (0.5-1) experimental; urgency=low
230 * New upstream release. Closes: #592312.
231 + Drop patches included upstream (DNS prefetching, jQuery 1.4
232 handling, email address validation, duplicate headers, incorrectly
233 formatted received headers). Adapt other patches. One of the patch
234 now correctly states to use dpkg-reconfigure roundcube-core.
236 + Update SQL commands to use to upgrade database.
237 That also closes: #602922. Unfortunately, the user may get some
238 harmless error messages because there is no way to know if
239 0.3.1 was installed from scratch or upgraded from 0.3.
240 + Update dependencies to match INSTALL file. Only exception is the
241 use of Mail_Mime 1.8.0 in place of 1.8.1 which is not available in
242 Debian. We depends on jQuery 1.4.2 because 1.4.4 is not available in
244 + All folders are correctly checked since 0.4. Closes: #552430.
245 + Also, closes: #553194 since it seems to have been fixed too.
246 + There is also the possibility to not top-quote since 0.4.
248 + Closes: #602144. Also fixed.
249 * Move .htaccess to /etc/roundcube and use a symlink (Closes: #591369).
250 * Don't let www-data overwrite debian-db.php. Closes: #608976.
251 * Bump Standards-Version. No changes required.
253 -- Vincent Bernat <bernat@debian.org> Sat, 15 Jan 2011 12:40:27 +0100
255 roundcube (0.3.1-6) unstable; urgency=low
257 * Update Arabic debconf translation, thanks to Ossama Khayat.
259 * Update Portuguese debconf translation, thanks to Christian Perrier.
261 * Add a patch to avoid duplicate boundaries in headers when adding an
262 attachment. Closes: #599586.
264 -- Vincent Bernat <bernat@debian.org> Mon, 18 Oct 2010 23:14:37 +0200
266 roundcube (0.3.1-5) unstable; urgency=low
268 * Depends on php-mail-mime 1.7.0 or more recent to handle correctly
269 'mime_param_folding' directive. Closes: #588295.
270 * Add Danish debconf translation, thanks to Joe Dalton.
272 * Add a patch to fix Received header to behave better with Spam
273 Assassin. Closes: #595204.
275 -- Vincent Bernat <bernat@debian.org> Thu, 02 Sep 2010 07:54:58 +0200
277 roundcube (0.3.1-4) unstable; urgency=low
279 * Update README.Debian to state that the variable to modify is
280 'htmleditor' instead of 'enable_htmleditor'. Thanks to Hans
281 Spaans. Closes: #575556.
282 * Add Brazilian Portuguese debconf translation, thanks to Eder
283 L. Marques. Closes: #581745.
284 * Switch default encoding to UTF-8 instead of ISO-8859-1.
286 * Add more explanations on how to install roundcube in a Debian system
287 in README.Debian. Closes: #584458, #582894.
288 * Bump Standards-Version. No changes required.
289 * Switch to 3.0 (quilt) format.
290 * Use Breaks instead of Conflicts to move files from older roundcube
293 -- Vincent Bernat <bernat@debian.org> Sat, 17 Jul 2010 17:23:30 +0200
295 roundcube (0.3.1-3) unstable; urgency=high
297 * RFC 5321, section 4.5.3.1, asks to not impose any limits on length if
298 possible. We respect this by dropping limitation of the local-part of
299 an email address. Closes: #568360, #568537.
300 * Suggests php-auth-sasl to enable use of SASL mechanisms for mail
301 servers. Closes: #567550.
302 * Disable DNS prefetching to avoid information leakage through links
303 embedded in messages. This fixes CVE-2010-0464. Closes: #569660.
304 * Bump Standards-Version. No changes required.
306 -- Vincent Bernat <bernat@debian.org> Sat, 13 Feb 2010 10:21:49 +0100
308 roundcube (0.3.1-2) unstable; urgency=low
310 * Fix VCS links in debian/control, thanks to Torsten Landschoff.
312 * Really ship NEWS.Debian.
313 * Add changesets 3170 and 3202 from upstream to handle gracefully jQuery
314 1.4. Thanks to Volker Gropp for the report. Closes: #565715.
316 -- Vincent Bernat <bernat@debian.org> Mon, 18 Jan 2010 23:11:01 +0100
318 roundcube (0.3.1-1) unstable; urgency=low
320 * New upstream release.
321 * Add a notice in NEWS.Debian about php.ini options that should be set
322 to get Roundcube working properly. Closes: #549428, #552508.
324 -- Vincent Bernat <bernat@debian.org> Sat, 07 Nov 2009 17:41:37 +0100
326 roundcube (0.3-2) unstable; urgency=low
328 * Really fix #544579 since the default value is null without
329 quotes. This really Closes: #544579.
330 * Enlarge login box to accommodate sk_SK locale. Closes: #542933.
332 -- Vincent Bernat <bernat@debian.org> Sun, 27 Sep 2009 11:26:56 +0200
334 roundcube (0.3-1) unstable; urgency=low
336 * New upstream release. Closes: #545498.
337 * Update debconf translations:
338 + Italian, thanks to Luca Monducci. Closes: #544199.
339 + Czech, thanks to Miroslav Kure. Closes: #546413.
340 * Roundcube configuration now uses 'language' instead of 'locale_string'
341 to specify the default language. Update postinst to reflect this
342 change. Thanks to Richard van den Berg for noticing this. Closes: #544579.
343 * Depends on libjs-jquery (>= 1.3) since this is now used by roundcube.
344 * Don't ship any plugins for now but ship an empty plugins directory.
345 * Ship main .htaccess since it is needed to setup correctly PHP (for
346 example, to disable PHP Suhosin cookie encryption).
347 * Bump Standards-Version. No changes required.
349 -- Vincent Bernat <bernat@debian.org> Sun, 27 Sep 2009 11:00:30 +0200
351 roundcube (0.2.2-1) unstable; urgency=low
353 * New upstream release
354 * Bump Standards-Version. No changes required.
355 * Remove *.js.src which are not needed at runtime.
356 * Don't send email contents to Google by default by using php5-pspell
357 instead. Thanks to Anand Kumria. Closes: #529563.
358 * Update debconf translations:
359 + Basque, thanks to Piarres Beobide. Closes: #534282.
361 -- Vincent Bernat <bernat@debian.org> Sun, 05 Jul 2009 09:53:17 +0200
363 roundcube (0.2.1-2) unstable; urgency=low
365 * Update debconf translations:
366 + German, thanks to Helge Kreutzmann. Closes: #520004.
367 + Japanese, thanks to Hideki Yamane. Closes: #520024.
368 + Spanish, thanks to Francisco Javier. Closes: #526696.
369 + Russian, thanks to Yuri Kozlov. Closes: #528796.
370 * Depend on php-mdb2-* (>= 1.5.0b2) since it is needed to fix some
371 bugs. Closes: #519104, #519293. Remove not needed any more patch from
372 debian/patches/series. Keep it in debian/patches to help backports.
374 -- Vincent Bernat <bernat@debian.org> Sat, 16 May 2009 15:30:17 +0200
376 roundcube (0.2.1-1) unstable; urgency=low
378 * New upstream release:
379 + Fix use_packaged_tinymce.patch to apply to this new version
380 + Remove cve-2009-0413.patch which has been applied upstream
382 -- Vincent Bernat <bernat@debian.org> Sat, 14 Mar 2009 17:42:07 +0100
384 roundcube (0.2~stable-2) unstable; urgency=low
386 * Update debconf translations:
387 + French, thanks to Christian Perrier. Closes: #515806.
388 + Swedish, thanks to Martin Bagge. Closes: #516683.
389 * Drop virtual package roundcube-db and add dependencies on real package
390 instead: this way, we can have versioned dependencies on those to avoid
391 version mismatch between packages.
392 * Add a patch to not use a MDB2 feature not present in the Debian
393 package. Thanks to Grzegorz Sobański for the patch. Closes: #519104.
395 -- Vincent Bernat <bernat@debian.org> Wed, 11 Mar 2009 18:49:32 +0100
397 roundcube (0.2~stable-1) unstable; urgency=low
399 * New upstream version. Closes: #503573, #504570.
400 + Add SQL update scripts for this new release and for
401 0.2~alpha. Remove copy of SQL upgrade script from debian/rules.
402 + Remove patch for CVE-2008-5620 which is now fixed upstream.
403 + Remove patch correcting a vulnerability in html2text.php.
404 + Remove patch fixing login issue. This is fixed upstream.
405 + Remove patch setting the default backend to db instead of mdb2:
406 this is not possible any more. We depend on php-mdb2 now.
407 + Update patch to use packaged tinymce.
408 * Upload to unstable since Lenny is out.
409 * Apply fix for XSS issue (CVE-2009-0413). Closes: #514179.
410 * Remove hack to update a SQLite table for an upgrade from a quite old
411 version of roundcube.
412 * Fix pending l10n issues:
413 + Update English debconf template. Closes: #473794.
414 + Add Swedish translation thanks to Martin Bagge. Closes: #508752.
415 * Fix debian/copyright to make lintian happy.
417 -- Vincent Bernat <bernat@debian.org> Sun, 15 Feb 2009 16:18:58 +0100
419 roundcube (0.2~alpha-4) experimental; urgency=low
421 * Add missing ${misc:Depends} to make Lintian happy.
422 * Add description to each patch.
423 * Execute cron job only if the directory to clean exists.
424 * Reload web server configuration instead of restart, thanks to a patch
425 from Tiago Bortoletto Vaz. Closes: #508633.
426 * Fix a vulnerability in quota image generation. This fixes
427 CVE-2008-5620. Thanks to Nico Golde for reporting it. Closes: #509596.
428 * Add missing dependency on php5-gd, used for quota bar.
429 * For roundcube-pgsql, depends on postgresql-client only. This package
430 is provided by the currently supported real package.
432 -- Vincent Bernat <bernat@debian.org> Thu, 25 Dec 2008 11:38:13 +0100
434 roundcube (0.2~alpha-3) experimental; urgency=high
437 * Fix a vulnerability in the use of preg_replace (Closes: #508628).
438 * Adapt descriptions of roundcube-database packages to refer them as
439 metapackages instead of virtual package (Closes: #495434).
440 * Add robots.txt from upstream, even if in some configuration, it will
441 not be considered (Closes: #499108).
442 * Do not ship .htaccess files. Restrictions are set in Apache or
443 Lighttpd configuration files (Closes: #500202).
446 * Changed versioned dependency of rouncube from binary:Version to
447 source:Version since these are all architecture independent packages.
449 -- Vincent Bernat <bernat@debian.org> Sat, 13 Dec 2008 14:36:02 +0100
451 roundcube (0.2~alpha-2) experimental; urgency=low
454 * Fix lintian warnings introduced by previous upload
455 * Fix lighttpd.conf to make it work with latest versions (Closes: #494044)
456 * Do not prepend path to lighty util in postinst and postrm, as per
457 Policy Manual section 6.1
458 * Ship a bug/control file to have all bugs submitted against roundcube
460 * Fix debian/roundcube-core.cron.daily to use
461 /etc/default/roundcube-core instead of /etc/default/roundcube which
462 should not exist any more
465 * Versioned roundcube-core dependency for roundcube
467 -- Vincent Bernat <bernat@debian.org> Sat, 16 Aug 2008 13:22:08 +0200
469 roundcube (0.2~alpha-1) experimental; urgency=low
471 * New upstream release
472 * Update debian/watch file to correctly consider those new releases
473 * Remove the following patches:
474 + messageid-headers-ordering
476 + disable-tinymce-spellchecker
477 * Update the following patches:
478 + correct_install_path
479 + use_packaged_tinymce
480 * Add a new patch to fix a login problem
481 * Depends on tinymce >= 3
483 -- Vincent Bernat <bernat@debian.org> Sun, 22 Jun 2008 14:10:44 +0200
485 roundcube (0.1.1-7) unstable; urgency=low
487 * Another fix for incorrect tinymce path. This should be the last one!
489 -- Vincent Bernat <bernat@debian.org> Sun, 22 Jun 2008 12:36:59 +0200
491 roundcube (0.1.1-6) unstable; urgency=low
493 * Fix use_packaged_tinymce patch which was incorrect after switch to
496 -- Vincent Bernat <bernat@debian.org> Sun, 22 Jun 2008 12:19:16 +0200
498 roundcube (0.1.1-5) unstable; urgency=low
500 * Fix ordering of message-id in message headers, thanks to Reinhard
501 Tartler (Closes: #486493)
502 * Update Standards-Version to 3.8.0
504 -- Vincent Bernat <bernat@debian.org> Tue, 17 Jun 2008 00:33:40 +0200
506 roundcube (0.1.1-4) unstable; urgency=low
508 * Add Slovak debconf translation, thanks to Ivan Masár (Closes: #481376)
509 * Fix debian/copyright:
510 + RoundCube is GPL-2 licensed, not GPL-2+
511 + Add an explanation on the BSD license present at the top of
512 index.php (Closes: #477119)
513 * We do not support tinymce 3, yet. Depends on tinymce2 | tinymce (<<
514 3). Closes: #481145, #483053, #482295
516 -- Vincent Bernat <bernat@debian.org> Tue, 20 May 2008 20:51:52 +0200
518 roundcube (0.1.1-3) unstable; urgency=low
520 * Fix an error introduced when fixing bug #476803. Thanks to Micah
521 Anderson for spotting it (Closes: #479775).
522 * Avoid to pop language question at every upgrade. Thanks to Ivan Vucica
523 for spotting this. The problem lied in the use of db_metaget to get
524 the value of a key set by db_subst in a previous invocation. It seems
525 this is not possible any more (Closes: #480043). The fix implies that
526 we won't ask the question again if more languages are available since
529 -- Vincent Bernat <bernat@debian.org> Thu, 08 May 2008 09:50:24 +0200
531 roundcube (0.1.1-2) unstable; urgency=low
533 * Comment by default Alias directive for tinymce in Apache configuration
534 file (Closes: #476162).
535 * Allow to preseed language value (Closes: #476803).
537 -- Vincent Bernat <bernat@luffy.cx> Sat, 19 Apr 2008 16:50:28 +0200
539 roundcube (0.1.1-1) unstable; urgency=low
541 * New upstream release
542 - Copy old SQL upgrade scripts into debian/sql to allow upgrade from
543 versions older than 0.1
544 - Patch new MySQL upgrade script to fix a typo
545 * Debconf translation updates:
546 - Spanish. Closes: #473788
547 * Depends on php-mail-mime (>= 1.5.0) and drop compatibility patch
548 * Install upstream changelog in /usr/share/doc/roundcube*
550 -- Vincent Bernat <bernat@luffy.cx> Sat, 05 Apr 2008 18:16:33 +0200
552 roundcube (0.1-4) unstable; urgency=low
554 * Debconf translation updates:
555 - French. Closes: #469802
556 - Russian. Closes: #469847
557 - Galician. Closes: #469866
558 - German. Closes: #469875
559 - Finnish. Closes: #469922
560 - Italian. Closes: #469987
561 - Czech. Closes: #470150
562 - Portuguese. Closes: #470156
563 - Spanish. Closes: #470732
564 - Basque. Closes: #470871
565 - Arabic. Closes: #471470
567 -- Vincent Bernat <bernat@luffy.cx> Sat, 08 Mar 2008 11:15:00 +0100
569 roundcube (0.1-3) unstable; urgency=low
571 * Fix problem with too old php-mail-mime package (Closes: #469814)
573 -- Vincent Bernat <bernat@luffy.cx> Fri, 07 Mar 2008 11:06:49 +0100
575 roundcube (0.1-2) unstable; urgency=low
577 * Ship bin/ directory as well. This fix conversion from HTML to text in
579 * Disable spellchecker for tinymce since it is not shipped with Debian
582 -- Vincent Bernat <bernat@luffy.cx> Fri, 07 Mar 2008 09:42:39 +0100
584 roundcube (0.1-1) unstable; urgency=low
586 * New upstream release (Closes: #469487).
587 - This release seems to fix failure to set some fields when replying,
588 with bincimap as IMAP server (Closes: #443562)
589 - It also fixes the deletion of multiple messages, still with
590 bincimap (Closes: #451404)
591 * Remove 'ob_gzhandler.patch' and 'xss-fix.patch'. They have been
593 * Upstream has switched to MDB2 database backend which is not packaged
594 in Debian yet. We switch back to old backend.
595 * Fix debian/watch to handle correctly detection of new versions.
596 * Add support for lighttpd and remove support for older version of
597 Apache. The debconf question about webserver autoconfiguration is
598 reworded (Closes: #462961).
599 * Do not depend on a specific revision of cdbs.
600 * Move po-debconf from Build-Depends-Indep to Build-Depends since it is
601 needed for clean target.
602 * Correct path to /usr/share/file/magic, provided by libmagic1. Provide
603 license information about this file in debian/copyright.
605 -- Vincent Bernat <bernat@luffy.cx> Wed, 05 Mar 2008 20:49:03 +0100
607 roundcube (0.1~rc2-6) unstable; urgency=high
609 * Bug fix: "CVE-2007-6321: Cross-site scripting (XSS) vulnerability",
610 thanks to Micah Anderson (Closes: #455840). The patch is from
611 http://lists.roundcube.net/mail-archive/dev/2007-12/0000038.html and
612 provided by Robin Elfrink. It has been modified with some functions
613 stolen from Squirrelmail.
614 * Finnish debconf template, thanks to Esko Arajärvi (Closes: #458244).
616 -- Vincent Bernat <bernat@luffy.cx> Sat, 29 Dec 2007 21:55:17 +0100
618 roundcube (0.1~rc2-5) unstable; urgency=low
620 * Deal with old /etc/logrotate.d/roundcube by removing it if left
621 untouched (Closes: #456546). Also deal with /etc/default/roundcube and
622 /etc/cron.daily/roundcube.
624 -- Vincent Bernat <bernat@luffy.cx> Tue, 18 Dec 2007 23:02:46 +0100
626 roundcube (0.1~rc2-4) unstable; urgency=low
628 * Thightened dependencies for a safe upgrade
629 * Finally removed any circular dependency, -db packages no longer pull
630 a full roundcube install
632 -- Romain Beauxis <toots@rastageeks.org> Sun, 09 Dec 2007 14:24:24 +0100
634 roundcube (0.1~rc2-3) unstable; urgency=low
637 * Bumped standard version to 3.7.3 (no changes)
639 -- Romain Beauxis <toots@rastageeks.org> Sun, 09 Dec 2007 14:19:28 +0100
641 roundcube (0.1~rc2-2) experimental; urgency=low
644 * Fix a conflict between ob_gzhandler and zlib output compression,
645 thanks to kaouete (Closes: #450482).
648 * Fix tinymce patch and inclusion
650 * Splitted virtual packages to avoid circular dependencies.
651 Uploading to experimental, as this is an important change and we may
654 -- Romain Beauxis <toots@rastageeks.org> Mon, 26 Nov 2007 11:54:21 +0100
656 roundcube (0.1~rc2-1) unstable; urgency=low
658 * New upstream, thanks to Nicolas Stransky (Closes: #447503). This
659 release support tinymce as HTML editor. Look at README.Debian for more
661 * Update Galician debconf template, thanks to Jacobo Tarrio (Closes: #447943).
663 -- Vincent Bernat <bernat@luffy.cx> Mon, 29 Oct 2007 22:08:43 +0100
665 roundcube (0.1~rc1-3) unstable; urgency=low
667 * In respect to policy 12.3, do not put main.inc.php.dist in
668 /usr/share/doc, thanks to Jonas Smedegaard (Closes: #446502).
669 * Update German and French debconf templates, thanks to Christian
670 Perrier (Closes: #446458) and Helge Kreutzmann (Closes: #446532).
672 -- Vincent Bernat <bernat@luffy.cx> Sun, 14 Oct 2007 08:41:24 +0200
674 roundcube (0.1~rc1-2) unstable; urgency=low
676 * Fix dependencies by creating virtual packages for each database
677 backend, thanks to Joey Hess (Closes: #444925).
679 -- Vincent Bernat <bernat@luffy.cx> Tue, 02 Oct 2007 20:09:19 +0200
681 roundcube (0.1~rc1-1) unstable; urgency=low
683 * New upstream release
684 * Removed non gpl file des.inc
686 -- Romain Beauxis <toots@rastageeks.org> Tue, 24 Jul 2007 13:36:20 +0200
688 roundcube (0.1~rc1~dfsg-3) unstable; urgency=low
690 * Add php5-mcrypt dependency (Closes: #431177)
692 -- Vincent Bernat <bernat@luffy.cx> Sat, 30 Jun 2007 19:36:21 +0200
694 roundcube (0.1~rc1~dfsg-2) unstable; urgency=low
696 * Removed custom unix_timestamp for sqlite: solved upstream
697 * Debconf templates and debian/control reviewed by the debian-l10n-
698 english team as part of the Smith review project.
699 Closes: #426086, #427546, #427546
700 * Debconf translation updates:
701 - Galician. Closes: #426140
702 - Basque. Closes: #426150
703 - Czech. Closes: #426428
704 - Portuguese. Closes: #426451
705 - Arabic. Closes: #427110
706 - Italian. Closes: #427206
707 - German. Closes: #427536
708 - French. Closes: #427736
709 - Tamil. Closes: #428254
710 - Russian. Closes: #428364
711 - Spanish. Closes: #428573
713 -- Romain Beauxis <toots@rastageeks.org> Tue, 05 Jun 2007 15:22:36 +0200
715 roundcube (0.1~rc1~dfsg-1) unstable; urgency=low
718 * New upstream release
719 * Update script for sqlite in postinst
721 * Fixed dh_link calls
723 * Added custom patch to use php unix timestamp support
724 with sqlite since UNIX_TIMESTAMP is not supported by sqlite.
725 * Dropped php4 dependencies
727 -- Vincent Bernat <bernat@luffy.cx> Sun, 20 May 2007 13:59:44 +0200
729 roundcube (0.1~beta2.2~dfsg-2) unstable; urgency=low
731 * Fix a security issue by disallowing access to logs.
732 * First upload to unstable.
734 -- Vincent Bernat <bernat@luffy.cx> Sat, 5 May 2007 00:23:40 +0200
736 roundcube (0.1~beta2.2~dfsg-1) experimental; urgency=low
738 * Initial release. (Closes: #333756, #344949)
740 -- Romain Beauxis <toots@rastageeks.org> Tue, 13 Mar 2007 13:28:05 +0100