Dev

dev@lists.roundcube.net

1 participants
4305 discussions

html2text conversion script vulnerability
by Andrew Wingate 11 Nov '09

11 Nov '09

Hello, This is in regards to http://lists.roundcube.net/mail-archive/announce/2008-12/0000000.html Let me know if this is the wrong venue, I was directed here by a forum moderator. I have several old versions of roundcube deployed for clients. Recently two of them were compromised using this vulnerability. My fault for not staying up to date, I think I even emailed myself the security update bulletin just never did it. At any rate, the vulnerability was used to create an adware serving system. My real question is this, contained in the adware directory are some large text files that I deduce the adware author used to rotate links etc., these files contain links to other compromised roundcube sites. What would be the best way to go about the process of notifying these admins?? Although this was several months ago, I just spot checked some of the links and they are still compromised. Thanks, Andy _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

[PATCH] Threaded messagelist view patch rev 3
by Vladislav Bogdanov 11 Nov '09

11 Nov '09

Hi all, here is the next revision of threaded message list patch Changes comparing to roundcubemail-threading-20090706.patch from http://www.atomice.com/blog/?page_id=34: 1. Ported to 0.3-SVN-r2976 2. Implemented auto expand of threads with unread messages only. 3. Added GUI configuration option for autoexpand control (on, off, unread). 4. Autoexpansion works in both static and JS message lists. 5. Automatically change between 'unread children' and message icons in a list (in parent message rows) when child message is marked read/unread. 6. Count messages, not threads in a message view pane. 7. Fixed navigation in a message view pane when threading is enabled. 8. Fixed setting folders with non-ASCII named to threaded mode. 9. Fixed incorrectly displayed rows (children of collapsed row) after multi-level expand/collapse. Simplified expand logic. 10. Fixed expand indicator is not changing when expanding/collapsing with keyboard. 11. Fixed plus key on a numeric keypad is not working (at least on linux Fedora 11 + Firefox 3.5.2). 12. Added support for whole thread expand/collapse with clicking/pressing hotkeys while holding the Control key. 13. Save expand state in env everywhere (after keypresses too). 14. Added russian translation. 15. Fixed indentation and braces style in JS to comply with RC coding style. Changes to my previous public revision: 16. (Multiple) selection works fine with threaded view too now (based on patch published by Nathan Kinkade). Selection list is altered immediately on a select action (opposed to Nathan's patch). Nested messages are added to selection list when collapsed parent is selected, and removed from it on a thread expand. I ask everybody to test this feature with both mouse and keyboard shortcuts. 17. Remove a bit of unused code. 18. Add only one div of a variable width to a messagelist row instead of set of divs. See comments inline. 19. Make dragging work with threaded view (locate subject text differently). 20. Re-read messagelist portion after move/delete operation if threading is enabled. See comments inline. (This does not fix a bug with non-atomic move/delete operations I noted before). I'm not sure I did it 100% right because of that bug which makes testing nearly impossible in my setup. I think that code (except thread caching which I don't use and didn't touch it at all, it is up to Chris) is a true beta quality now (based on my testing) and is ready to be tested intensively in different setups. Comments are welcome as usual. Best, Vladislav --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/1h/WkvtBXFZ/roundcubemail-thread.patch http://detached.gigo.com/rc/1h/WkvtBXFZ/unread_children.png Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

4 19

Traditional chinese zh_TW translation update
by StevenHsu 10 Nov '09

10 Nov '09

Hi, all Updated traditional Chinese translation to current 0.3.1 stable and correct some typo in the previous translation files. Best Regards, ITCI Co., Ltd. Steven Hsu --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/uA/RrhngZ1D/zh_TW.zip Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

Re: [RCD] Chinese Traditional (zh_TW) Updated
by Anthony Kwok 09 Nov '09

09 Nov '09

Why the skin cannot load properly when I use the attached translation file generated from the translator? Anyone knows? 2009/11/4 Anthony Kwok <anthony.onestart(a)gmail.com> > Hi, > > The Chinese Traditional (zh_TW) localization files have been updated. > However, when I tried to use these files updated and generated from > http://translator.roundcube.net by uploading them to the localization > folder, they do not work properly and Roundcue interface cannot be loaded. > Can someone fix the file format if they need some tuning? Thanks. > > Anthony. > _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

0.2.x -> 0.3.x search behavior change
by Derek Yarnell 09 Nov '09

09 Nov '09

So one of my users noticed that the search has changed a bunch going from 0.2.x to 0.3.x. That by default the roll down has only Subject checked (this used to be subject and sender?). Well that was all fine I added a patch to change the default behavior to subject and sender. However the user also noticed that the Sent folder changed this behavior to search on the recipient in 0.2.x. Now in 0.3.x this all gets to whatever is set by this line in program/steps/mail/func.inc, $OUTPUT->set_env('search_mods', $_SESSION['search_mods'] ? $_SESSION ['search_mods'] : array('subject'=>'subject')); First do people believe that this is a good thing that this behavior is changed (aka is this not a bug)? Secondly I had two thoughts on the sent folder behavior. One is that one could just change the default behavior for that folder(s). Otherwise you could setup a preference to choose your default search fields however this may just really be able to be a global setting and wouldn't really fix the sent folder problem. Thoughts? Derek Yarnell UNIX Systems Administrator University of Maryland Institute for Advanced Computer Studies _______________________________________________ List info: http://lists.roundcube.net/dev/

3 4

0.3.1 Log file
by Sandro Pazzi 09 Nov '09

09 Nov '09

Hi all, here the today log error file: [09-Nov-2009 11:25:44] PHP Warning: array_merge() [<a href='function.array-merge'>function.array-merge</a>]: Argument #1 is not an array in C:\LAVORI\Software\IdCustomerV2\roundcube\program\include\session.inc on line 82 [09-Nov-2009 16:01:08] PHP Warning: array_merge() [<a href='function.array-merge'>function.array-merge</a>]: Argument #1 is not an array in C:\LAVORI\Software\IdCustomerV2\roundcube\program\include\session.inc on line 82 [09-Nov-2009 16:01:08] PHP Warning: array_merge() [<a href='function.array-merge'>function.array-merge</a>]: Argument #1 is not an array in C:\LAVORI\Software\IdCustomerV2\roundcube\program\include\session.inc on line 82 [09-Nov-2009 16:11:35] PHP Warning: array_merge() [<a href='function.array-merge'>function.array-merge</a>]: Argument #1 is not an array in C:\LAVORI\Software\IdCustomerV2\roundcube\program\include\session.inc on line 82 [09-Nov-2009 16:16:01] File not found: C:\LAVORI\Software\IdCustomerV2\roundcube\temp\rcm1CB3.tmp (): [09-Nov-2009 16:16:01] File not found: C:\LAVORI\Software\IdCustomerV2\roundcube\temp\rcm1CB4.tmp (): [09-Nov-2009 16:49:13] PHP Warning: array_merge() [<a href='function.array-merge'>function.array-merge</a>]: Argument #1 is not an array in C:\LAVORI\Software\IdCustomerV2\roundcube\program\include\session.inc on line 82 [09-Nov-2009 16:50:56] PHP Warning: array_merge() [<a href='function.array-merge'>function.array-merge</a>]: Argument #1 is not an array in C:\LAVORI\Software\IdCustomerV2\roundcube\program\include\session.inc on line 82 [09-Nov-2009 16:50:56] PHP Warning: array_merge() [<a href='function.array-merge'>function.array-merge</a>]: Argument #1 is not an array in C:\LAVORI\Software\IdCustomerV2\roundcube\program\include\session.inc on line 82 [09-Nov-2009 16:53:43 +0100]: SMTP Error: Invalid compose ID in C:\LAVORI\Software\IdCustomerV2\roundcube\program\steps\mail\sendmail.inc on line 0 (POST ?_task=mail&_action=send) [09-Nov-2009 16:54:10 +0100]: SMTP Error: Invalid compose ID in C:\LAVORI\Software\IdCustomerV2\roundcube\program\steps\mail\sendmail.inc on line 0 (POST ?_task=mail&_action=send) hope this help. Thanks -- Sandro Pazzi IdWeb s.r.l. Viale Romagna 69/A - 06012 Citta' di Castello (PG) Tel. 075 851 97 28 Fax 075 851 97 30 _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

Updated Hebrew translation
by Moish 09 Nov '09

09 Nov '09

-- Moish --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/Jf/eaTUgpQC/messages.inc http://detached.gigo.com/rc/Jf/eaTUgpQC/labels.inc Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

Updated nb-NO language files
by Axel Sjøstedt 08 Nov '09

08 Nov '09

Hello, Updated nb_NO language files for r3101 attached :) Related note: Some browsers (i.e. Internet Explorer 7 and below) use the general language code "no" (valid in ISO 639-1/2) as the only default language setting. In that case Roundcube now displays nn-NO, but a more preferred behaviour is to display nb-NO. nb-NO is used by about 85-90% of the population according to Wikipedia: <url: http://en.wikipedia.org/wiki/Bokmål > Best Regards, -- Axel --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/S4/KdSXUdvt/labels.inc http://detached.gigo.com/rc/S4/KdSXUdvt/messages.inc Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

1 1

managesieve plugin needs update Pear / Net_Sieve
by mitko＠banksoft-bg.com 08 Nov '09

08 Nov '09

The latest version of managesieve plugin can not work with the embedded "lib / Net / Net_Sieve.php" After refresh it to version 1.2.0 from pear.php.net - everything is OK Error message is: "sieve[9369]: badlogin: ...... DIGEST-MD5 authentication failure" IMAP server is: cyrus - Cyrus timsieved v2.3.15 PHP version: PHP 5.2.11 _______________________________________________ List info: http://lists.roundcube.net/dev/

2 2

en_GB update
by Phil Weir 08 Nov '09

08 Nov '09

Hi, Update for en_GB core localisation attached. I think in the UK its more usual to call Junk mail Spam, may be we should change the text value in the file, what do any other UK people think? Phil --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/4G/vvMV6n5T/labels.inc http://detached.gigo.com/rc/4G/vvMV6n5T/messages.inc Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev