Commit Graph

985 Commits (c25a6cf09b9ad1d8aef72f4a37075b30eab2c15e)

Author SHA1 Message Date
Aleksander Machniak de25226d31 Enigma: Fix "decryption oracle" bug [CVE-2019-10740] (#6638)
When composing mail (on reply/forward/edit) we decrypt content only
in the first "content part" of the message.
6 years ago
Aleksander Machniak f8afd18713 Enigma: Fix error message when trying to encrypt with a revoked private key (#6607) 6 years ago
Aleksander Machniak 0c828a254e Enigma: Fix bug where revoked users/keys were not greyed out in key info
The 'deleted' class was assigned to the wrong (next) row in a table.
It also didn't work in Elastic skin at all because of the missing style.
6 years ago
Aleksander Machniak 02631baf9e Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled (#6723) 6 years ago
Aleksander Machniak b7b2afc6be Fix PHP 7.2 compatibility in debug_logger plugin (#6586) 6 years ago
Aleksander Machniak 4303c59467 New_user_identity: Fix %fu/%u vars substitution in user specific LDAP params (#6419) 6 years ago
Aleksander Machniak 0304f7c75b Managesieve: Fix bug where show_real_foldernames setting wasn't respected (#6422) 6 years ago
Aleksander Machniak 3087c25cb6 Enigma: Fix deleting keys with authentication subkeys (#6381) 6 years ago
Aleksander Machniak 94da947855 [EFAIL] Don't decrypt PGP messages with no MDC protection (#6289) 7 years ago
Caio Nardi e4cee31a54 Fix checking duplicated names in the zip file (#6302) 7 years ago
Aleksander Machniak 5f444885b8 Use array() instead of [] 7 years ago
Aleksander Machniak 175c9359cb Enigma: Enable keypair generation on Internet Explorer 11 7 years ago
Aleksander Machniak e3dd5b66d2 Fix check_request() bypass in places using get_uids() [CVE-2018-9846] (#6238) 7 years ago
Aleksander Machniak e57c66f0d3 Enigma: Add positiblity to modify list of identities for key generation by other plugins 7 years ago
Aleksander Machniak ad628a9bef Enigma: Fix key selection for signing
In some cases a public key of other user could be selected instead
of the sender's private key
7 years ago
Aleksander Machniak fb791f3302 Enigma: Fix key generation in Safari by upgrade to OpenPGP 2.6.2 (#6149) 7 years ago
Aleksander Machniak 96cee7cd92 Update changelog 7 years ago
Jan Ehrhardt db83952247 Fix seteditraw classic save button (#6164)
Fixes https://github.com/roundcube/roundcubemail/issues/6154
7 years ago
Aleksander Machniak 369fedf313 Fix bug where text: syntax was forced for strings longer than 1024 characters (#6143) 7 years ago
Aleksander Machniak a4de40566d Validate ACL identifiers
... e.g. to prevent cyrus imap issues
7 years ago
Aleksander Machniak 6fb6a0b885 Update localization 7 years ago
Aleksander Machniak 9c542f9cf9 Fix PHP 7.2 Warning: count(): Parameter must be an array or an object that implements Countable 7 years ago
Aleksander Machniak d1327024cc Fix bug where Archive folder wasn't auto-created on login with create_default_folders=true 7 years ago
Aleksander Machniak 471f6a81f3 Fix so temp_dir misconfiguration prints an error to the log (#6045) 7 years ago
Aleksander Machniak c90ad5a977 Fix file disclosure vulnerability caused by insuficient input validation in relation with attachment plugins (#6026) 7 years ago
Thomas Bruederli 2c7f3751ab Update localization files from Transifex 7 years ago
Aleksander Machniak 0dc804a840 Fix decryption of messages encoded with non-ascii charset (#5962) 7 years ago
Thomas Bruederli ec948564da Updated localizations from Transifex 7 years ago
Aleksander Machniak 4829e2849f Enigma: Fix decrypting an encrypted+signed message when signature verification fails (#5914) 7 years ago
Aleksander Machniak f8e6302c85 Fix bug where 'exists' operator was reset to 'contains' (#5899) 7 years ago
Aleksander Machniak 02c7c9fc53 Fix duplicate messages on the list after deleting messages on the next to the last page (#5862)
... also when deleting via 'mark' and 'archive' actions
7 years ago
Aleksander Machniak f483c08ddf Update changelog 7 years ago
Aleksander Machniak 3439fc4159 Managesieve: Fix AM/PM suffix in vacation time selectors 7 years ago
Aleksander Machniak e31d87b311 Move "cursor" position on \r\n sequence after single-dot in a line (#5838) 8 years ago
Aleksander Machniak 0abd84dc02 Fix parsing dot-staffed lines in multiline text (#5838) 8 years ago
Aleksander Machniak c608d063af Fix bug where a.button style from managesieve plugin could impact other elements (#5800) 8 years ago
Aleksander Machniak b7fe41def2 Remove useless box-shadows 8 years ago
Remi Collet 90eafe7eaa Drop ereg dependency, fix compat with PHP 7 (#5820) 8 years ago
Aleksander Machniak fe4c626062 Code optimization, update changelog 8 years ago
Lucas Stevanelli Marin fa566b6b1e Fix bug where zipdownload ignored files with the same name (#5777)
Adding a counter before .(extension) to files with same name on zip.
Before only the last file on message with equals names was added on zip
8 years ago
Aleksander Machniak 73126e6d78 Bump version number 8 years ago
Aleksander Machniak 6bdaada7fa Performance: Skip redundant LISTSCRIPTS command 8 years ago
Aleksander Machniak 0a8fe2ae5b Enigma: Fix compatibility with assets_dir 8 years ago
Aleksander Machniak 3b36ea8529 Update localization 8 years ago
Aleksander Machniak 06abad4d4e Password: Fix security issue in virtualmin and sasl drivers 8 years ago
Thomas Bruederli d4e4cfef92 More flattening of jQuery UI styles 8 years ago
Thomas Bruederli 7969981320 Flattened buttons and icons, removed gradients and box shadows 8 years ago
Aleksander Machniak 757ba8b81a Fix typo 8 years ago
Torkel Bjørnson-Langen 278b46a99d password plugin: better error message on constraint violation (#5727)
If the password policy on the ldap server is violated when changing
password, report error as "constraint violation" instead of the
misleading "connection error".

Only tested with OpenLDAP (v2.4).
8 years ago
Aleksander Machniak 01656221a4 Update localization 8 years ago