* Fix monthly rotation of sent folder on multilingual systems.
* Miscellaneous small i18n fixes.
* New "any message" webmail filter option.
* Improve the "message limit exceeded" error message.
* New checkbox on the login form enables/disables soft timeout.
* Create an invisible frame at login time that reloads at
timeoutsoft/2 intervals, thus keeping the session alive
* Fix bug where overriding TIMEOUTSOFT via environment variables may
cause calendar session to timeout prematurely
+ Add an INSTALL script that detects the presence of the old
sqwebmail state directory and that informs the admin to move it
to the new location.
+ Install some more of the HTML documentation in the location expected
by courier-mta.
* Complete re-implementation of the LDAP addressbook.
* Increase the maximum size of the CGI environment to avoid certain
classes of browser/website problems.
* Update attribute count, after purging invalid html syntax/
* Fix some HTML display bugs
* When using GPG, sign the entire message in its entirety, instead
of signing each MIME part separately. Some E-mail clients cannot
handle individually-signed multipart/alternative content.
* Fix HTML templates (remove 8bit content inserted by Amaya).
* Wiki-style composition of HTML messages.
Also, the "fam" option is noted to be supported here now, although
the logic to handle it is still in mail/courier-maildir/Makefile.common.
* Use PCRE for pattern-matching
* When autopurging messages from a folder based on their
timestamp, scan 'new' in addition to 'cur', otherwise mail
delivered to the folder directly never gets purged, unless
the folder is open.
* Filter out <!-- > constructs, they are parsed by MSIE.
* Remove attributes with imbalanced quotes, to prevent
cross-side scripting vulnerabilities with some browsers.
* Show each attachment's MIME content type.
* sqwebmail: Implemented account groups, administrator group.
* sqwebmaild.dist.in (LOGGEROPTS): Added LOGGEROPTS setting.
* gpglib/gpg.c: gnupg returns non-zero exit even if succesfully
unencrypted, when just the signature is bad.
* sv-make_timezonelist.pl: Added /usr/share/lib/zoneinfo to the
search list.
include:
* log login failures.
* Replace 'nodsn' control file with 'wbnodsn' account option. Replace
'nochangepass' control file with 'wbnochangepass' account option.
Replace 'nochangingfrom' control file with 'wbnochangingfrom' account
option. Replace usexsender with 'wbusexsender' and noimages with
'wbnoimages'.
* Fix off-by 1 in GPG key export.
Changes from version 3.6.2 include:
* Honor ${VARBASE}.
* Remove pcpd and sqwebmaild rc.d scripts and replace them with a
single sqwebmail rc.d script that calls the Courier-provided control
script to start/stop the SqWebMail service daemons.
* Use sysconftool from courier-auth to merge config files.
* Move HTML documentation into ${PREFIX}/share/doc after discussion
with wiz.
* Support for the ACL IMAP extension.
* Improve support for MIME encodings.
* Fixes buffer overflow vulnerability (PR 25774):
http://www.securityfocus.com/bid/9845http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0224
Split sqwebmail into sqwebmail and sqwebmaild. sqwebmaild is now a
root daemon process that listens on a UNIX domain socket. sqwebmail
is a tiny, unprivileged cgi-bin stub that forwards the HTTP request
to the daemon process. The stub passes the client's file descriptor
to sqwebmaild, on platforms that support passing file descriptors,
else it proxies http traffic in both directions.
Replace GIFs with PNGs
Do GPG functions via a library instead of invoking mimegpg.
RFC 2231 support
it can be parsed by SqWebMail. SqWebMail expects output to be of the
form
class1=name1
class2=name2
...
but the output from ldapsearch seems to be
class1: name1
class2: name2
We massage it into the former using sed. This makes LDAP searches against
ldap.bigfoot.com work properly when using the "Global Addressbook" feature
of SqWebMail.
SqWebMail is a web CGI client for sending and receiving E-mail using
Maildir mailboxes. It is very lightweight -- it reads mail directly
from Maildirs.
