Dev February 2007

dev@lists.roundcube.net

55 participants
47 discussions

[Fwd: RFS: roundcube]
by Robin Elfrink 26 Feb '07

26 Feb '07

Hi, It seems that RoundCube is going to enter the official Debian archives soon. Thomas, congratulations! :) Robin -------- Original Message -------- Subject: RFS: roundcube Resent-Date: Sat, 10 Feb 2007 16:21:46 -0600 (CST) Resent-From: debian-mentors(a)lists.debian.org Date: Sat, 10 Feb 2007 23:21:35 +0100 From: Vincent Bernat <bernat(a)luffy.cx> Organization: One Piece To: debian-mentors(a)lists.debian.org, debian-webapps(a)lists.debian.org Dear mentors, I am looking for a sponsor for my package "roundcube". * Package name : roundcube Version : 0.099+0.1b2.2-1 Upstream Author : Thomas Bruederli <roundcube(a)gmail.com> * URL : http://www.roundcube.net * License : GPL Section : web It builds these binary packages: roundcube - modern, skinable, AJAX based webmail solution for IMAP servers The package is lintian clean. The upload would fix these bugs: 333756, 344949 The package can be found on mentors.debian.net: - URL: http://mentors.debian.net/debian/pool/main/r/roundcube - Source repository: deb-src http://mentors.debian.net/debian unstable main contrib non-free - dget http://mentors.debian.net/debian/pool/main/r/roundcube/roundcube_0.099+0.1b… I would be glad if someone uploaded this package for me. This is still a beta quality software but I use it happily every day. The package uses dbconfig-common to configure database. It supports sqlite, MySQL and PostgreSQL backend. To avoid to pull too much packages, it does not depend on any of those backends. Any comment on this is welcome. I have put a note in README.Debian. The other question is that roundcube requires a temp directory. I have modified the config file to create /var/tmp/roundcube. I don't know what should be the best way. If the directory already exists, it can be a security risk (the user owning the directory could delete files or put symlinks in it). Maybe should I put this temporary directory in /var/lib/roundcube instead ? Kind regards Vincent Bernat -- Say what you mean, simply and directly. - The Elements of Programming Style (Kernighan & Plauger) -- To UNSUBSCRIBE, email to debian-mentors-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org

6 6

Dangerous! XSS vulnerability
by Michael Bueker 26 Feb '07

26 Feb '07

http://trac.roundcube.net/trac.cgi/ticket/1484254 This should get immediate attention. ~Mik -- Apudne te vel me? // Your place or mine? From "Sensual Latin" by Henry Beard

5 6

[Fwd: Re: Roundcube and DBMail]
by Chris Richardson 24 Feb '07

24 Feb '07

sorry just noticed this person responded to my last message on the subject and didnt include all The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this material from any computer. In accordance with industry regulations, all messages are retained and are subject to monitoring. This message has been scanned for viruses and dangerous content and is believed to be clean. Securities offered through Cantella & Co., Inc., Member NASD/SIPC. Home Office: 2 Oliver Street, 11th Floor, Boston, MA 02109 Telephone: (617)521-8630

1 0

Lithuanian translation
by Martynas Bendorius 24 Feb '07

24 Feb '07

Hello, I've just made a new Lithuanian translation. Please include it into the next releases. Good luck! -- Martynas Bendorius,

2 1

pop3?
by Joelsite 23 Feb '07

23 Feb '07

Hi Roundcube, When will you make it so you can use roundcube with pop3? Will it be soon? Please email me when pop3 is supported. Many Thanks, Joel Kennedy

7 8

security bugs
by Chris Weber 22 Feb '07

22 Feb '07

I'm loving Roundcube, installation and configuration is a breeze, and the interface is elegant. I just installed it today and plan to get some good use from it . I've also started poking at it to find any security issues I can. What's the preferred method for me to submit security bugs such as XSS? good stuff, Chris

6 6

Has #1484162 been applied yet?
by Michael Bueker 22 Feb '07

22 Feb '07

Hi, I didn't keep track of the localizations, so could someone check if #1484162 has been applied yet, so we can close it? ~Mik -- <HeatZync> what is the use of the calendar? <RogueRunner> it's like DNS for days - from bash.org

2 1

2 issues with Round Cube
by Pierre Demester 22 Feb '07

22 Feb '07

Hello, I think I found 2 different issues with Round Cube. I've attached several gif images to this email... hoping it will assist you in locate the issues. You may have already found them. Issue 1: Check mail option (both graphic and text) produce an error message. (see image) Issue 2: Add new folder "Test" - rename folder to "Save" - folder "Save" will not be "subscribed" - when you "subscribe" "Save" folder... "Save" folder will appear on list - cannot remove folder "Test". If you need more explaination - contact me. Pierre

2 1

Catalan translation
by Andreu escudero 22 Feb '07

22 Feb '07

Hello, I have added some remaining sentences to the catalan translation. I have seen some inconsistent things too, could I please talk to the main translator for catalan in order to provide a default translation style? Also, is this the right way to submit new translations? please infor me of anything more I could do. Thanks, Andreu Escudero -- Das Experimental Kunstwerk http://canuda.net

3 3

bug in smtp auth
by Daniel Reichelt 21 Feb '07

21 Feb '07

Hi folks! I just hunted down a pretty simple yet annoying bug concerning smtp auth. I'm using a password with special characters in it which get \-escaped by my php installation. I tracked down the issue to lie in rcube_smpt.inc:L101 which I changed like this: FROM $smtp_pass = str_replace('%p', decrypt_passwd($_SESSION['password']), $CONFIG['smtp_pass']); TO $smtp_pass = str_replace('%p', stripslashes(decrypt_passwd($_SESSION['password'])), $CONFIG['smtp_pass']); I don't know if it might be more useful to move stripslashes into decrypt_passwd - I'll leave that up to you. Furthermore, a "king's solution" might be to query the value of PHP's magic_qpc_quotes variable to strip-slash the decrypted password only when it's been \-escaped - thus making the usage of backslashes in the smtp password possible. HTH & cheers, Daniel PS: sorry for potential double post, don't know if the first post got through due to touchy smtp auth :-)

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev February 2007