From e1ae2002014ee01bc3a556f42bf43dba80e074c8 Mon Sep 17 00:00:00 2001 From: Thomas Bruederli Date: Wed, 6 Apr 2016 22:10:59 +0200 Subject: [PATCH] Transliterate ticket IDs after migration to Github issues --- CHANGELOG | 3020 ++++++++++++++++++++++++++--------------------------- 1 file changed, 1510 insertions(+), 1510 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index bdf48b7e4..efffb6c33 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -2,175 +2,175 @@ CHANGELOG Roundcube Webmail =========================== - Fix missing emoticons on html-to-text conversion -- Fix random "access to this resource is secured against CSRF" message at logout (#1490641) -- Fix missing language name in "Add to Dictionary" request in HTML mode (#1490634) -- Enable use of TLSv1.1 and TLSv1.2 for IMAP (#1490640) -- Fix XSS issue in SVG images handling (#1490625) -- Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#1490643) -- Fix bug where Archive/Junk buttons were not active after page jump with select=all mode (#1490647) -- Fix bug in long recipients list parsing for cases where recipient name contained @-char (#1490653) +- Fix random "access to this resource is secured against CSRF" message at logout (#4956) +- Fix missing language name in "Add to Dictionary" request in HTML mode (#4951) +- Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955) +- Fix XSS issue in SVG images handling (#4949) +- Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#4958) +- Fix bug where Archive/Junk buttons were not active after page jump with select=all mode (#4961) +- Fix bug in long recipients list parsing for cases where recipient name contained @-char (#4964) - Plugin API: Added addressbook_export hook -- Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9 (#1490657) -- Hide DSN option in Preferences when smtp_server is not used (#1490666) -- Protect download urls against CSRF using unique request tokens (#1490642) +- Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9 (#4966) +- Hide DSN option in Preferences when smtp_server is not used (#4967) +- Protect download urls against CSRF using unique request tokens (#4957) - newmail_notifier: Refactor desktop notifications - Fix so contactlist_fields option can be set via config file - Fix so SPECIAL-USE assignments are forced only until user sets special folders (#4782) RELEASE 1.1.4 ------------- -- Add workaround for https://bugs.php.net/bug.php?id=70757 (#1490582) -- Fix duplicate messages in list and wrong count after delete (#1490572) +- Add workaround for https://bugs.php.net/bug.php?id=70757 (#4931) +- Fix duplicate messages in list and wrong count after delete (#4925) - Fix so Installer requires PHP5 -- Make brute force attacks harder by re-generating security token on every failed login (#1490549) -- Slow down brute-force attacks by waiting for a second after failed login (#1490549) -- Fix .htaccess rewrite rules to not block .well-known URIs (#1490615) -- Fix mail view scaling on iOS (#1490551) -- Fix so database_attachments::cleanup() does not remove attachments from other sessions (#1490542) -- Fix responses list update issue after response name change (#1490555) -- Fix bug where message preview was unintentionally reset on check-recent action (#1490563) -- Fix bug where HTML messages with invalid/excessive css styles couldn't be displayed (#1490539) -- Fix redundant blank lines when using HTML and top posting (#1490576) -- Fix redundant blank lines on start of text after html to text conversion (#1490577) -- Fix HTML sanitizer to skip in output (#1490583) -- Fix invalid LDAP query in ACL user autocompletion (#1490591) -- Fix regression in displaying contents of message/rfc822 parts (#1490606) -- Fix handling of message/rfc822 attachments on replies and forwards (#1490607) -- Fix PDF support detection in Firefox > 19 (#1490610) -- Fix path traversal vulnerability (CWE-22) in setting a skin (#1490620) -- Fix so drag-n-drop of text (e.g. recipient addresses) on compose page actually works (#1490619) +- Make brute force attacks harder by re-generating security token on every failed login (#4913) +- Slow down brute-force attacks by waiting for a second after failed login (#4913) +- Fix .htaccess rewrite rules to not block .well-known URIs (#4943) +- Fix mail view scaling on iOS (#4915) +- Fix so database_attachments::cleanup() does not remove attachments from other sessions (#4907) +- Fix responses list update issue after response name change (#4917) +- Fix bug where message preview was unintentionally reset on check-recent action (#4921) +- Fix bug where HTML messages with invalid/excessive css styles couldn't be displayed (#4905) +- Fix redundant blank lines when using HTML and top posting (#4927) +- Fix redundant blank lines on start of text after html to text conversion (#4928) +- Fix HTML sanitizer to skip in output (#4932) +- Fix invalid LDAP query in ACL user autocompletion (#4934) +- Fix regression in displaying contents of message/rfc822 parts (#4937) +- Fix handling of message/rfc822 attachments on replies and forwards (#4938) +- Fix PDF support detection in Firefox > 19 (#4941) +- Fix path traversal vulnerability (CWE-22) in setting a skin (#4945) +- Fix so drag-n-drop of text (e.g. recipient addresses) on compose page actually works (#4944) RELEASE 1.1.3 ------------- -- Fix closing of nested menus (#1490443) -- Fix so E_DEPRECATED errors from PEAR libs are ignored by error_reporting change (#1490281) -- Fix compatibility with PHP 5.3 in rcube_ldap class (#1490424) -- Get rid of Mail_mimeDecode package dependency (#1490416) -- Fix "Importing..." message does not hide on error (#1490422) -- Fix SQL error on logout when using session_storage=php (#1490421) -- Update to jQuery 2.1.4 (#1490406) -- Fix Compose action in addressbook for results from multiple addressbooks (#1490413) -- Fix bug where some messages in multi-folder search couldn't be viewed/printed/downloaded (#1490426) -- Fix unintentional messages list page change on page switch in compose addressbook (#1490427) -- Fix race-condition in saving user preferences and loading plugin config (#1490431) -- Fix so plain text signature field uses monospace font (#1490435) -- Fix so links with href == content aren't added to links list on html to text conversion (#1490434) -- Fix handling of non-break spaces in html to text conversion (#1490436) -- Fix self-reply detection issues (#1490439) -- Fix multi-folder search result sorting by arrival date (#1490450) -- Fix so *-request@ addresses in Sender: header are also ignored on reply-all (#1490452) -- Update to TinyMCE 4.1.10 (#1490405) -- Fix draft removal after a message is sent and storing sent message is disabled (#1490467) -- Fix so imap folder attribute comparisons are case-insensitive (#1490466) +- Fix closing of nested menus (#4854) +- Fix so E_DEPRECATED errors from PEAR libs are ignored by error_reporting change (#4770) +- Fix compatibility with PHP 5.3 in rcube_ldap class (#4842) +- Get rid of Mail_mimeDecode package dependency (#4836) +- Fix "Importing..." message does not hide on error (#4840) +- Fix SQL error on logout when using session_storage=php (#4839) +- Update to jQuery 2.1.4 (#5165) +- Fix Compose action in addressbook for results from multiple addressbooks (#4834) +- Fix bug where some messages in multi-folder search couldn't be viewed/printed/downloaded (#4843) +- Fix unintentional messages list page change on page switch in compose addressbook (#4844) +- Fix race-condition in saving user preferences and loading plugin config (#4845) +- Fix so plain text signature field uses monospace font (#4848) +- Fix so links with href == content aren't added to links list on html to text conversion (#4847) +- Fix handling of non-break spaces in html to text conversion (#4849) +- Fix self-reply detection issues (#4852) +- Fix multi-folder search result sorting by arrival date (#4858) +- Fix so *-request@ addresses in Sender: header are also ignored on reply-all (#4860) +- Update to TinyMCE 4.1.10 (#5164) +- Fix draft removal after a message is sent and storing sent message is disabled (#4869) +- Fix so imap folder attribute comparisons are case-insensitive (#4868) - Fix bug where new messages weren't added to the list in search mode -- Fix wrong positioning of message list header on page scroll in Webkit browsers (#1490035) -- Fix some javascript errors in rare situations (#1490441) -- Fix error when using back button after sending an email (#1490009) -- Fix removing signature when switching to identity with an empty sig in HTML mode (#1490470) -- Disable links list generation on html-to-text conversion of identities or composed message (#1490437) +- Fix wrong positioning of message list header on page scroll in Webkit browsers (#4646) +- Fix some javascript errors in rare situations (#4853) +- Fix error when using back button after sending an email (#4628) +- Fix removing signature when switching to identity with an empty sig in HTML mode (#4872) +- Disable links list generation on html-to-text conversion of identities or composed message (#4850) - Fix "washing" of style elements wrapped into many lines -- Fix so input field (e.g. search box) does not loose focus on list load (#1490455) -- Fix so css of one html part does not apply to other text parts on message display (#1490505) -- Fix handling of plus character in mailto: links (#1490510) -- Fix so adding CC/BCC recipients from the sidebar unhides compose form fields in Classic skin (#1490472) -- Fix so gc.sh script removes also expired sessions from sql database (#1490512) -- Fix support for Mozilla-based browsers, e.g. Pale Moon (#1490517) -- Fix various issues with Turkish (and similar) locales (#1490519) -- Fix so In-Reply-To header is set also for MDN receipts (#1490523) +- Fix so input field (e.g. search box) does not loose focus on list load (#4862) +- Fix so css of one html part does not apply to other text parts on message display (#4887) +- Fix handling of plus character in mailto: links (#4891) +- Fix so adding CC/BCC recipients from the sidebar unhides compose form fields in Classic skin (#4874) +- Fix so gc.sh script removes also expired sessions from sql database (#4893) +- Fix support for Mozilla-based browsers, e.g. Pale Moon (#4895) +- Fix various issues with Turkish (and similar) locales (#4896) +- Fix so In-Reply-To header is set also for MDN receipts (#4897) - Fix missing HTTP_X_FORWARDED_FOR address in generated Received header -- Fix XSS issue in drag-n-drop file uploads (#1490530) -- Fix issue where Content-Length of some attachments could be set to wrong value causing browser errors (#1490482) +- Fix XSS issue in drag-n-drop file uploads (#4900) +- Fix issue where Content-Length of some attachments could be set to wrong value causing browser errors (#4877) RELEASE 1.1.2 ------------- -- Add new plugin hook 'identity_create_after' providing the ID of the inserted identity (#1490358) +- Add new plugin hook 'identity_create_after' providing the ID of the inserted identity (#4807) - Add option to place signature at bottom of the quoted text even in top-posting mode [sig_below] -- Fix handling of %-encoded entities in mailto: URLs (#1490346) -- Fix zipped messages downloads after selecting all messages in a folder (#1490339) +- Fix handling of %-encoded entities in mailto: URLs (#4799) +- Fix zipped messages downloads after selecting all messages in a folder (#4797) - Fix vpopmaild driver of password plugin -- Fix PHP warning: Non-static method PEAR::setErrorHandling() should not be called statically (#1490343) -- Fix tables listing routine on mysql and postgres so it skips system or other database tables and views (#1490337) -- Fix message list header in classic skin on window resize in Internet Explorer (#1490213) -- Fix so text/calendar parts are listed as attachments even if not marked as such (#1490325) -- Fix lack of signature separator for plain text signatures in html mode (#1490352) -- Fix font artifact in Google Chrome on Windows (#1490353) -- Fix bug where forced extwin page reload could exit from the extwin mode (#1490350) -- Fix bug where some unrelated attachments in multipart/related message were not listed (#1490355) -- Fix mouseup event handling when dragging a list record (#1490359) -- Fix bug where preview_pane setting wasn't always saved into user preferences (#1490362) -- Fix bug where messages count was not updated after message move/delete with skip_deleted=false (#1490372) -- Fix security issue in contact photo handling (#1490379) -- Fix possible memcache/apc cache data consistency issues (#1490390) -- Fix bug where imap_conn_options were ignored in IMAP connection test (#1490392) -- Fix bug where some files could have "executable" extension when stored in temp folder (#1490377) -- Fix attached file path unsetting in database_attachments plugin (#1490393) -- Fix issues when using moduserprefs.sh without --user argument (#1490399) -- Fix potential info disclosure issue by protecting directory access (#1490378) -- Fix blank image in html_signature when saving identity changes (#1490412) -- Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key (#1490402) -- Fix XSS vulnerability in _mbox argument handling (#1490417) +- Fix PHP warning: Non-static method PEAR::setErrorHandling() should not be called statically (#4798) +- Fix tables listing routine on mysql and postgres so it skips system or other database tables and views (#4796) +- Fix message list header in classic skin on window resize in Internet Explorer (#4732) +- Fix so text/calendar parts are listed as attachments even if not marked as such (#4795) +- Fix lack of signature separator for plain text signatures in html mode (#4802) +- Fix font artifact in Google Chrome on Windows (#4803) +- Fix bug where forced extwin page reload could exit from the extwin mode (#4801) +- Fix bug where some unrelated attachments in multipart/related message were not listed (#4805) +- Fix mouseup event handling when dragging a list record (#4808) +- Fix bug where preview_pane setting wasn't always saved into user preferences (#4809) +- Fix bug where messages count was not updated after message move/delete with skip_deleted=false (#4814) +- Fix security issue in contact photo handling (#4817) +- Fix possible memcache/apc cache data consistency issues (#4820) +- Fix bug where imap_conn_options were ignored in IMAP connection test (#4822) +- Fix bug where some files could have "executable" extension when stored in temp folder (#4815) +- Fix attached file path unsetting in database_attachments plugin (#4823) +- Fix issues when using moduserprefs.sh without --user argument (#4825) +- Fix potential info disclosure issue by protecting directory access (#4816) +- Fix blank image in html_signature when saving identity changes (#4833) +- Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key (#4827) +- Fix XSS vulnerability in _mbox argument handling (#4837) RELEASE 1.1.1 ------------- - ACL: Allow other plugins to adjust the list of permissions and groups to edit - Add possibility to print contact information (of a single contact) -- Add possibility to configure max_allowed_packet value for all database engines (#1490283) +- Add possibility to configure max_allowed_packet value for all database engines (#4772) - Improved handling of storage errors after message is sent - Update to TinyMCE 4.1.9 - Unified request* event arguments handling, added support for _unlock and _action parameters -- Security: Generate random hash for the per-user local storage prefix (#1490279) -- Fix refreshing of drafts list when sending a message which was saved in meantime (#1490238) +- Security: Generate random hash for the per-user local storage prefix (#4768) +- Fix refreshing of drafts list when sending a message which was saved in meantime (#4745) - Fix saving/sending emoticon images when assets_dir is set -- Fix PHP fatal error when visiting Vacation interface and there's no sieve script yet (#1490292) +- Fix PHP fatal error when visiting Vacation interface and there's no sieve script yet (#4778) - Fix setting max packet size for DB caches and check packet size also in shared cache -- Fix needless security warning on BMP attachments display (#1490282) -- Fix handling of some improper constructs in format=flowed text as per the RFC3676[4.5] (#1490284) +- Fix needless security warning on BMP attachments display (#4771) +- Fix handling of some improper constructs in format=flowed text as per the RFC3676[4.5] (#4773) - Fix performance of rcube_db_mysql::get_variable() -- Fix missing or not up-to-date CATEGORIES entry in vCard export (#1490277) -- Fix fatal errors on systems without mbstring extension or mb_regex_encoding() function (#1490280) -- Fix cursor position on reply below the quote in HTML mode (#1490263) +- Fix missing or not up-to-date CATEGORIES entry in vCard export (#4766) +- Fix fatal errors on systems without mbstring extension or mb_regex_encoding() function (#4769) +- Fix cursor position on reply below the quote in HTML mode (#4759) - Fix so "over quota" errors are displayed also in message compose page -- Fix duplicate entries supression in autocomplete result (#1490290) -- Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281) -- Fix parsing invalid HTML messages with BOM after (#1490291) -- Fix duplicate entry on timezones list in rcube_config::timezone_name_from_abbr() (#1490293) -- Fix so localized folder name is displayed in multi-folder search result (#1490243) -- Fix javascript error after creating a folder which is a subfolder of another one (#1490297) -- Fix bug where subject of sent/saved message was removed if mbstring wasn't installed (#1490295) -- Fix missing vcard_attachment icon on messages list (#1490303) -- Fix storing signatures with big images in MySQL database (#1490306) -- Fix Opera browser detection in javascript (#1490307) +- Fix duplicate entries supression in autocomplete result (#4776) +- Fix "Non-static method PEAR::isError() should not be called statically" errors (#4770) +- Fix parsing invalid HTML messages with BOM after (#4777) +- Fix duplicate entry on timezones list in rcube_config::timezone_name_from_abbr() (#4779) +- Fix so localized folder name is displayed in multi-folder search result (#4750) +- Fix javascript error after creating a folder which is a subfolder of another one (#4781) +- Fix bug where subject of sent/saved message was removed if mbstring wasn't installed (#4780) +- Fix missing vcard_attachment icon on messages list (#4783) +- Fix storing signatures with big images in MySQL database (#4785) +- Fix Opera browser detection in javascript (#4786) - Fix so search filter, scope and fields are reset on folder change -- Fix rows count when messages search fails (#1490266) -- Fix bug where spellchecking in HTML editor do not work after switching editor type more than once (#1490311) -- Fix bug where TinyMCE area height was too small on slow network connection (#1490310) -- Fix backtick character handling in sql queries (#1490312) -- Fix redirct URL for attachments loaded in an iframe when behind proxy (#1490191) -- Fix menu container references to point to the actual