Hello community, here is the log from the commit of package roundcubemail for openSUSE:Factory checked in at 2018-04-16 12:49:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/roundcubemail (Old) and /work/SRC/openSUSE:Factory/.roundcubemail.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "roundcubemail" Mon Apr 16 12:49:06 2018 rev:51 rq:596413 version:1.3.6 Changes: -------- --- /work/SRC/openSUSE:Factory/roundcubemail/roundcubemail.changes 2018-03-28 10:32:06.963460341 +0200 +++ /work/SRC/openSUSE:Factory/.roundcubemail.new/roundcubemail.changes 2018-04-16 12:49:09.980725368 +0200 @@ -1,0 +2,12 @@ +Fri Apr 13 06:40:00 UTC 2018 - [email protected] + +- Upgrade to version 1.3.6 + * Fix parsing date strings (e.g. from a Date: mail header) with comments + * Fix PHP 7.2: count(): Parameter must be an array in enchant-based spellchecker + * Fix possible IMAP command injection and type juggling vulnerabilities + * Enigma: Fix key selection for signing + * Enigma: Enable keypair generation on Internet Explorer 11 + * Fix check_request() bypass in places using get_uids() (CVE-2018-9846 boo#1067574) + * Fix bug where usernames without domain part could be malformed or converted to lower-case on logon + +------------------------------------------------------------------- Old: ---- roundcubemail-1.3.5-complete.tar.gz roundcubemail-1.3.5-complete.tar.gz.asc New: ---- roundcubemail-1.3.6-complete.tar.gz roundcubemail-1.3.6-complete.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ roundcubemail.spec ++++++ --- /var/tmp/diff_new_pack.1Z4lav/_old 2018-04-16 12:49:10.804695396 +0200 +++ /var/tmp/diff_new_pack.1Z4lav/_new 2018-04-16 12:49:10.808695250 +0200 @@ -17,7 +17,7 @@ Name: roundcubemail -Version: 1.3.5 +Version: 1.3.6 Release: 0 Summary: A browser-based multilingual IMAP client License: GPL-3.0-or-later AND GPL-2.0-only AND BSD-3-Clause ++++++ roundcubemail-1.3.5-complete.tar.gz -> roundcubemail-1.3.6-complete.tar.gz ++++++ ++++ 2593 lines of diff (skipped)
