Changelog:
FIXED
Security fixes can be found here
FIXED
Attachments sometimes could not be removed from the composition window using the keyboard, this is now fixed (799451)
Fixed in Thunderbird 17.0.3
MFSA 2013-28 Use-after-free, out of bounds read, and buffer overflow issues found using Address Sanitizer
MFSA 2013-27 Phishing on HTTPS connection through malicious proxy
MFSA 2013-26 Use-after-free in nsImageLoadingContent
MFSA 2013-25 Privacy leak in JavaScript Workers
MFSA 2013-24 Web content bypass of COW and SOW security wrappers
MFSA 2013-21 Miscellaneous memory safety hazards (rv:19.0 / rv:17.0.3)
- fix retrieving mail from an IMAP mailbox with non-ASCII characters
in its name causing difficult-to-understand unicode errors during
delivery. Thanks: "fsLeg", Krzysztof Warzech.
== 1.21 / 2013-02-09
* New MIME Types:
* Various new or updated MIME types by Garret Alfert:
application/vnd.ms-fontobject, .eot; application/x-chrome-extension, .crx;
application/x-web-app-manifest\+json, .webapp; application/x-xpinstall,
.xpi; image/svg\+xml, .svg, .svgz; image/webp, .webp; text/cache-manifest,
.appcache, .manifest. https://github.com/halostatue/mime-types/pull/24
* Fixed some Manifest.txt related madness on Travis.
== 1.20.1 / 2013-01-26
* New MIME Types:
* Apple iWork document types added by Hans de Graaff
(application/x-iwork-keynote-sffkey, .key;
application/x-iwork-pages-sffpages, .pages;
application/x-iwork-numbers-sffnumbers, .numbers).
https://github.com/halostatue/mime-types/issue/20
* epub, ibooks, mobi, and DMG content types by Mauricio
Linhares (mac:application/x-apple-diskimage, .dmg; application/epub\+zip,
.epub; application/x-ibooks\+zip, .ibooks; application/x-mobipocket-ebook,
.mobi). https://github.com/halostatue/mime-types/issue/22
* rss content type by Garret Alfert (application/rss\+xml, .rss).
https://github.com/halostatue/mime-types/issue/23
* Added or updated MIME types from the latest IANA list.
* Fixed MIME Types:
* Excel macro-enabled spreadsheets had an incorrect extension. Thanks to
Rafael Belvederese for reporting this issue.
https://github.com/halostatue/mime-types/issue/21
* Enabled for use with travis.
* Enabled gem signing.
* Fixed an error related to MIME type downloads.
* This was previously published as 1.20, but I had forgotten some attributions.
by poppnk, othyro and supported by lots of others.
Minimalist stands for Minimalistic Mailing Lists Manager. Although it is
declared as minimalistic, it has many features as his eldest brosers, such
as Majordomo and so on, but in contrast to them it is very small, fast,
simple for setup and maintenance. Also it has very clean internal structure
and if you are familiar with Perl, you can add as many additional features,
as you need.
CHANGELOG Roundcube Webmail
===========================
- Fix #countcontrols issue in IE<=8 when text is very long (#1488890)
- Fix unwanted horizontal scrollbar in message preview header (#1488866)
- Add workaround for IE<=8 bug where Content-Disposition:inline was ignored
(#1488844)
- Fix XSS vulnerability in vbscript: and data:text links handling (#1488850)
- Fix absolute positioning in HTML messages (#1488819)
- Fix keybord events on messages list in opera browser (#1488823)
- Fix cache (in)validation after setting \Deleted flag
- Fix selection of collapsed thread rows (#1488772)
- Fix wrapping of quoted text with format=flowed (#1488177)
- will look at making recently requested changes in a subsequent commit
8.14.6/8.14.6 2012/12/23
Fix a regression introduced in 8.14.5: if a server offers
two AUTH lines, the MTA would not read them after
STARTTLS has been used and hence SMTP AUTH for
the client side would fail. Problem noted by Lena.
Do not cache hostnames internally in a non case sensitive way
as that may cause addresses to change from lower case
to upper case or vice versa. These header modifications
can cause problems with milters that rely on receiving
headers in the same way as they are being sent out such
as a DKIM signing milter.
If MaxQueueChildren is set then it was possible that new queue
runners could not be started anymore because an
internal counter was subject to a race condition.
If a milter decreases the timeout it waits for a communication
with the MTA, the MTA might experience a write() timeout.
In some situations, the resulting error might have been
ignored. Problem noted by Werner Wiethege.
Note: decreasing the communication timeout in a milter
should not be done without considering the potential
problems.
smfi_setsymlist() now properly sets the list of macros for
the milter which invoked it, instead of a global
list for all milters. Problem reported by
David Shrimpton of the University of Queensland.
If Timeout.resolver.retrans is set to a value larger than 20,
then resolver.retry was temporarily set to 0 for
gethostbyaddr() lookups. Now it is set to 1 instead.
Patch from Peter.
If sendmail could not lock the statistics file due to a system
error, and sendmail later sends a DSN for a mail that
triggered such an error, then sendmail tried to access
memory that was freed before (causing a crash on some
systems). Problem reported by Ryan Stone.
Do not log negative values for size= nor pri= to avoid confusing
log parsers, instead limit the values to LONG_MAX.
Account for an API change in newer versions of Cyrus-SASL.
Patch from Hajimu UMEMOTO from FreeBSD.
Do not try to resolve link-local addresses for IPv4 (just as it
is done for IPv6). Patch from John Beck of Oracle.
Improve logging of client and server STARTTLS connection failures
that may be due to incompatible cipher lists by including
the reason for the failure in a single log line. Suggested
by James Carey of Boeing.
Portability:
Add support for Darwin 11.x and 12.x (Mac OS X 10.7 and 10.8).
Add support for SunOS 5.12 (aka Solaris 12). Patch from
John Beck of Oracle.
