ccc2ea3781
Update squirrelmail to 1.4.23pre14832. - Changed anti-CSRF security token lifetime to be session-based. - Added favicon and ability for admins to use their own by setting $head_tag_extra in config_local.php (see documented comments in, for example, src/webmail.php) - Altered hook types "do_hook_function" and "concat_hook_function" such that the ultimate hook return value (in its current state, as computed (or not) by the plugins that have executed previously) is both globalized and passed as an additional argument to each plugin. This allows plugins to cooperate better and not overwrite each other's return values. - Updated SVG handling, closing several related vulnerabilities (#2831) [CVE-2018-14950] [CVE-2018-14951] [CVE-2018-14952] [CVE-2018-14953] [CVE-2018-14954] [CVE-2018-14955] - Added IMAP ID command (RFC2971), sent after every login - use by setting $imap_id_command_args in config/config_local.php (see notes in functions/imap_general.php for more details) - Fixed PHP7 warnings (#2847) - Added handling for RCDATA and RAWTEXT elements in HTML sanitizer [CVE-2019-12970]
10 lines
729 B
Text
10 lines
729 B
Text
$NetBSD: distinfo,v 1.71 2019/07/24 03:49:35 taca Exp $
|
|
|
|
SHA1 (squirrelmail-webmail-1.4.23pre14832.tar.xz) = 32c38a24766fb5d0364253fdab36501923d7d9cd
|
|
RMD160 (squirrelmail-webmail-1.4.23pre14832.tar.xz) = 689831ce73482384ce90b1ccfc84f81b29ad17eb
|
|
SHA512 (squirrelmail-webmail-1.4.23pre14832.tar.xz) = b8a380f5bb72d2fdb2793edaf10410f3a3cdd8e3f7a44a4d3775be22cb202f29b2ee7c574f33986cfcb2d066dc6085b9b8092340f526e2c3dc8be1b39ccd8d12
|
|
Size (squirrelmail-webmail-1.4.23pre14832.tar.xz) = 519160 bytes
|
|
SHA1 (patch-aa) = 4ba7ea0a85308816b9dc77c0af3c927359ed1275
|
|
SHA1 (patch-ab) = 30bf68c730f20e817fbe81d18bc2a95899ee3fd0
|
|
SHA1 (patch-ai) = e1a23673bf19bbbd88b00fb6bab3d6d1c8c11575
|
|
SHA1 (patch-ca) = d2e41316b8ecd97b49842eff548219e40e9b163a
|