Hello community, here is the log from the commit of package squirrelmail checked in at Tue Jul 11 21:10:10 CEST 2006. -------- --- squirrelmail/squirrelmail.changes 2006-02-08 13:47:17.000000000 +0100 +++ squirrelmail/squirrelmail.changes 2006-07-11 14:16:41.000000000 +0200 @@ -1,0 +2,6 @@ +Tue Jul 11 13:52:09 CEST 2006 - mjancar@suse.cz + +- update to 1.4.7 + * fix CVE-2006-2842 local file inclusion (#181148) + +------------------------------------------------------------------- Old: ---- squirrelmail-1.4.5-mail.diff squirrelmail-1.4.5-security.diff squirrelmail-1.4.5.tar.bz2 New: ---- squirrelmail-1.4.7.tar.bz2 squirrelmail-1.4.7.tar.bz2.md5 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ squirrelmail.spec ++++++ --- /var/tmp/diff_new_pack.yLn6uh/_old 2006-07-11 21:08:56.000000000 +0200 +++ /var/tmp/diff_new_pack.yLn6uh/_new 2006-07-11 21:08:56.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package squirrelmail (Version 1.4.5) +# spec file for package squirrelmail (Version 1.4.7) # # Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -12,8 +12,8 @@ Name: squirrelmail BuildRequires: apache2-devel libapr-util1-devel pcre-devel -Version: 1.4.5 -Release: 6 +Version: 1.4.7 +Release: 1 Requires: mod_php_any Requires: php-gettext Requires: php-iconv @@ -33,8 +33,7 @@ Source1: config.php Source2: README.SUSE Source3: squirrelmail.conf -Patch0: %{name}-%{version}-mail.diff -Patch1: %{name}-%{version}-security.diff +Source4: %{name}-%{version}.tar.bz2.md5 BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildArchitectures: noarch @@ -60,14 +59,12 @@ %prep %setup -q -%patch -%patch1 + +%build rm -f functions/mime.php.orig cp %{S:1} config/ cp %{S:2} . -%build - %install install -d -m 0755 %{b_sqm_path} cp -a * %{b_sqm_path}/ @@ -102,6 +99,9 @@ %dir %attr(-, root, www) /var/lib/squirrelmail/attach %changelog -n squirrelmail +* Tue Jul 11 2006 - mjancar@suse.cz +- update to 1.4.7 + * fix CVE-2006-2842 local file inclusion (#181148) * Wed Feb 08 2006 - anicka@suse.cz - fix sending mails on PHP5 (#146573) - various security fixes from CVS: ++++++ squirrelmail-1.4.5.tar.bz2 -> squirrelmail-1.4.7.tar.bz2 ++++++ ++++ 24757 lines of diff (skipped) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit-help@opensuse.org