Bug#593465: Please try
Hi Micah, I Wrote: Hi Micah! Hi, I just posted a follow-up to the Debian bug you reported about the squirrelmail security regression. I neglected to CC you, so you probably didn't know about it. But could you have a look and try the fixed package that I've uploaded and then report back to the bug report? For your convience, I'm speaking of this one: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593465 thanks! micah Yes, your fix (gotten from: http://people.debian.org/~micah/squirrelmail_1.4.15-4+lenny4_all.deb) seems to solve the problem with 8-bit char passwords in my setup - I could log in without problem into squirrelmail with such a password. Thank you a lot! :-) the new package seems to have a negative side effect: the search via squirrelmail now gives an error and yields no results any more. Sorry Bye! Jan Kontze -- Vor 40 Jahren kam in Deutschland die Pille auf den Markt. Wer in der DDR nicht schwanger werden wollte, ging einfach in den Spitzensport. -- Harald Schmidt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#593465: Please try
Hi Micah! Hi, I just posted a follow-up to the Debian bug you reported about the squirrelmail security regression. I neglected to CC you, so you probably didn't know about it. But could you have a look and try the fixed package that I've uploaded and then report back to the bug report? For your convience, I'm speaking of this one: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593465 thanks! micah Yes, your fix (gotten from: http://people.debian.org/~micah/squirrelmail_1.4.15-4+lenny4_all.deb) seems to solve the problem with 8-bit char passwords in my setup - I could log in without problem into squirrelmail with such a password. Thank you a lot! :-) Thanks Bye! Jan Kontze -- Hast du Zahnpasta im Ohr, kommt dir alles leiser vor. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#593465: squirrelmail: Unimplemented function sqimap_run_literal_command() after security update
Hi Thijs! On woansdei 18 Augustus 2010, Jan Kontze wrote: User who used 8bit chars in their imap passwords now get a: Fatal error: Call to undefined function sqimap_run_literal_command() in /usr/share/squirrelmail/functions/imap_general.php on line 528 error and cannot log in any more. Thanks for the report. Can you confirm that the following update resolves the problem: http://loeki.tv/~thijs/squirrelmail/squirrelmail_1.4.15-4+lenny4_all.deb Sorry, I cannot confirm that. :-( Now, the login of a user with a password that includes 8bit chars simply hangs for while and it states after it: FEHLER: Verbindung wurde vom IMAP-Server abgebrochen. in Englisch Error: Connection was interrupted by IMAP server. Which IMAP Server is this? Cyrus? Yes, and unfortunateley still cyrus21-imapd ... Thanx Bye! Jan Kontze -- Es genügt nicht, keine Gedanken zu haben, man muß auch unfähig sein, sie auszudrücken. --Karl Kraus -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#593465: squirrelmail: Unimplemented function sqimap_run_literal_command() after security update
Hi Thijs! Hi Jan, On woansdei 18 Augustus 2010, Jan Kontze wrote: User who used 8bit chars in their imap passwords now get a: Fatal error: Call to undefined function sqimap_run_literal_command() in /usr/share/squirrelmail/functions/imap_general.php on line 528 error and cannot log in any more. Thanks for the report. Can you confirm that the following update resolves the problem: http://loeki.tv/~thijs/squirrelmail/squirrelmail_1.4.15-4+lenny4_all.deb Sorry, I cannot confirm that. :-( Now, the login of a user with a password that includes 8bit chars simply hangs for while and it states after it: FEHLER: Verbindung wurde vom IMAP-Server abgebrochen. in Englisch Error: Connection was interrupted by IMAP server. All other user accounts continue to work okay. Thanks and Bye! Jan Kontze -- Mach 'nem Mann ein Feuer und du wärmst ihn für 'ne Stunde. Mach aus 'nem Mann ein Feuer und du wärmst ihn für den Rest seines Lebens. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#593465: squirrelmail: Unimplemented function sqimap_run_literal_command() after security update
Package: squirrelmail Version: 2:1.4.15-4+lenny3.1 Severity: serious Tags: l10n Justification: important After security update squirrelmail_2%3a1.4.15-4+lenny3.1_all.deb an unimplemented function sqimap_run_literal_command() is used in imap_general.php. User who used 8bit chars in their imap passwords now get a: Fatal error: Call to undefined function sqimap_run_literal_command() in /usr/share/squirrelmail/functions/imap_general.php on line 528 error and cannot log in any more. -- System Information: Debian Release: 5.0.5 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.26_UB (SMP w/4 CPU cores) Locale: lang=de...@euro, lc_ctype=de...@euro (charmap=ISO-8859-15) Shell: /bin/sh linked to /bin/bash Versions of packages squirrelmail depends on: ii apache22.2.9-10+lenny8 Apache HTTP Server metapackage ii apache2-mpm-prefor 2.2.9-10+lenny8 Apache HTTP Server - traditional n ii libapache2-mod-php 5.2.6.dfsg.1-1+lenny9 server-side, HTML-embedded scripti ii perl 5.10.0-19lenny2 Larry Wall's Practical Extraction ii php5-cgi 5.2.6.dfsg.1-1+lenny9 server-side, HTML-embedded scripti Versions of packages squirrelmail recommends: ii aspell [aspell-bin]0.60.6-1 GNU Aspell spell-checker ii squirrelmail-locales 1.4.13-20071220-1 Translations for the SquirrelMail Versions of packages squirrelmail suggests: ii cyrus21-imapd [ima 2.1.18-5.1Cyrus mail system (IMAP support) pn imapproxy none(no description available) ii php-pear 5.2.6.dfsg.1-1+lenny9 PEAR - PHP Extension and Applicati ii php4-pear 6:4.4.4-8+etch6 PHP Extension and Application Repo pn php5-ldap | php4-l none(no description available) pn squirrelmail-decod none(no description available) -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#507890: perl-modules 5.8.8-7etch5 break ytnef-filter
Package: ytnef Version: 2.6-1 Severity: normal Recent update of perl-modules from 5.8.8-7etch3 to 5.8.8-7etch5 seems to break ytnef-filter in many cases. A single, stray boundary line - as specified in the Content-Type header field is appended to mail body and prevents Cyrus imap lmtpd from successfully delivering those emails (after being filtered by ytnef-filter). The following tnef relevant(?) lines in mail header and an one-line mail body lines might be enough to trigger that behaviour: Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=_=_NextPart_001_01C956C3.5FFA0A45 X-MimeOLE: Produced By Microsoft Exchange V6.5 X-MS-Has-Attach: X-MS-TNEF-Correlator: The result of ytnef-filtering is a mail with a single line --_=_NextPart_001_01C956C3.5FFA0A45-- appended at the end, which is then rejected by exim/Cyrus lmtpd with a LMTP error after end of data: 554 5.6.0 Message contains invalid header error. -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.24 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages ytnef depends on: ii libc6 2.3.6.ds1-13etch7 GNU C Library: Shared libraries ii libytnef0 1.5-1 improved decoder for application/m Versions of packages ytnef recommends: ii libmailtools-perl 1.74-1 Manipulate email in perl programs ii libmime-perl 5.420-0.1 Perl5 modules for MIME-compliant m -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
