Add a notice in NEWS.Debian about php.ini options that should be set

to get Roundcube working properly. Closes: #549428, #552508.

diff --git a/debian/NEWS.Debian b/debian/NEWS.Debian
new file mode 100644 (file)
index 0000000..2bd82c1
--- /dev/null
+++ b/debian/NEWS.Debian
@@ -0,0 +1,15 @@
+roundcube (0.3-3) unstable; urgency=low
+
+  * Starting from Roundcube 0.3, an incompatibility with Suhosin session
+    encryption is present. This can be resolved by tuning php.ini for
+    Roundcube with the "suhosin.session.encrypt" set to "Off".
+  
+    We ship a .htaccess in /var/lib/roundcube to disable this
+    option. However, this only works with a webserver like Apache with
+    mod_php. If you are using a webserver with PHP configured as a *CGI
+    process, you need to tune the php.ini for this process: either turn of
+    globally Suhosin session encryption in /etc/php5/conf.d/suhosin or you
+    can provide your own php.ini to php5-cgi with "-c" option.
+
+ -- Vincent Bernat <bernat@debian.org>  Mon, 02 Nov 2009 19:48:22 +0100
+

diff --git a/debian/changelog b/debian/changelog
index a77c67fb20ceed0315e2c4e0ff1c6dc00b8fc434..acdb374b2872638bc204b2c9bee24eb343c9226d 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+roundcube (0.3-3) unstable; urgency=low
+
+  * Add a notice in NEWS.Debian about php.ini options that should be set
+    to get Roundcube working properly. Closes: #549428, #552508.
+
+ -- Vincent Bernat <bernat@debian.org>  Mon, 02 Nov 2009 19:42:33 +0100
+
 roundcube (0.3-2) unstable; urgency=low
 
   * Really fix #544579 since the default value is null without