lp:~siretart/+junk/bug.306536

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #306536: CVE-2008-2379 insufficient input sanitising

Medium

Fix Released

Link a bug report

Related blueprints

18. By Reinhard Tartler on 2008-12-09

Address cross site scripting issue in the HTML filter
(CVE-2008-2379). LP: #306536.
Patch taken from the debian package version 1.4.15-4.

17. By Daniel Hahler on 2008-11-01

* Sync from Debian (LP: #204754)
* README.locales: add paragraph about setting up locales for gettext
  (LP: #133845)
* Modify Maintainer value to match the DebianMaintainerField
  specification.

16. By Thijs Kinkhorst on 2008-11-01

New upstream release.

15. By Thijs Kinkhorst on 2008-11-01

* New upstream release.
* Minor packaging cleanups.

14. By Thijs Kinkhorst on 2008-11-01

Fix broken attachment handling in PHP4 by applying patch
from upstream.
NOTE: this is only a courtesy to PHP4 users, it must be noted
that Debian does not support PHP4 in current unstable anymore.
(Closes: #444970)

13. By Thijs Kinkhorst on 2008-11-01

* Make use of new dictionaries-common SquirrelMail interface to
  detect the installed squirrelspell dictionaries (Closes: #420877).
* Remove obsolete upgrading code.
* Make sure config files are not closed with '?>' since it's then
  too easy to get stray whitespace at the end of the file.

12. By Thijs Kinkhorst on 2008-11-01

* New upstream security release.
  - Fixes cross site scripting in the HTML filter [CVE-2007-1262]
  - Tweaks SMTP error message display (Closes: #403705).
  - Fixes address duplication on reply-all (Closes: #408242).

11. By Thijs Kinkhorst on 2008-11-01

* New upstream security release.
  - Additionally tightens HTML filter for IE <= 5 parsing
    absolutely everything and it's horse.

10. By Thijs Kinkhorst on 2008-11-01

* Add note to README.Debian about server side sorting (Closes: #394286)
  and regular_globals not being supported.
* Add IfModule conditionals for register_globals setting in
  apache.conf (Closes: #398173).

9. By Thijs Kinkhorst on 2008-11-01

* Update Debian patch to display options to cope with the custom
  charset plugin. Thanks Tomas Kuliavas, Closes: #385300.
* Suggest php[45]-ldap, Closes: #392306.
* Improve package description.