Commit Graph

986 Commits (f2e610dbe5faef8a82f3fde034555dc0caebc45a)

Author SHA1 Message Date
Jack Cherng 45e099b0be Fix implode() wrong parameter order (#6866)
It has been deprecated in PHP 7.4.

Such as PHP deprecated:  implode(): Passing glue string after array is deprecated. Swap the parameters in /var/www/roundcubemail/program/lib/Roundcube/rcube_db.php on line 917

Signed-off-by: Jack Cherng <jfcherng@gmail.com>
6 years ago
Aleksander Machniak de25226d31 Enigma: Fix "decryption oracle" bug [CVE-2019-10740] (#6638)
When composing mail (on reply/forward/edit) we decrypt content only
in the first "content part" of the message.
7 years ago
Aleksander Machniak f8afd18713 Enigma: Fix error message when trying to encrypt with a revoked private key (#6607) 7 years ago
Aleksander Machniak 0c828a254e Enigma: Fix bug where revoked users/keys were not greyed out in key info
The 'deleted' class was assigned to the wrong (next) row in a table.
It also didn't work in Elastic skin at all because of the missing style.
7 years ago
Aleksander Machniak 02631baf9e Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled (#6723) 7 years ago
Aleksander Machniak b7b2afc6be Fix PHP 7.2 compatibility in debug_logger plugin (#6586) 7 years ago
Aleksander Machniak 4303c59467 New_user_identity: Fix %fu/%u vars substitution in user specific LDAP params (#6419) 7 years ago
Aleksander Machniak 0304f7c75b Managesieve: Fix bug where show_real_foldernames setting wasn't respected (#6422) 7 years ago
Aleksander Machniak 3087c25cb6 Enigma: Fix deleting keys with authentication subkeys (#6381) 7 years ago
Aleksander Machniak 94da947855 [EFAIL] Don't decrypt PGP messages with no MDC protection (#6289) 8 years ago
Caio Nardi e4cee31a54 Fix checking duplicated names in the zip file (#6302) 8 years ago
Aleksander Machniak 5f444885b8 Use array() instead of [] 8 years ago
Aleksander Machniak 175c9359cb Enigma: Enable keypair generation on Internet Explorer 11 8 years ago
Aleksander Machniak e3dd5b66d2 Fix check_request() bypass in places using get_uids() [CVE-2018-9846] (#6238) 8 years ago
Aleksander Machniak e57c66f0d3 Enigma: Add positiblity to modify list of identities for key generation by other plugins 8 years ago
Aleksander Machniak ad628a9bef Enigma: Fix key selection for signing
In some cases a public key of other user could be selected instead
of the sender's private key
8 years ago
Aleksander Machniak fb791f3302 Enigma: Fix key generation in Safari by upgrade to OpenPGP 2.6.2 (#6149) 8 years ago
Aleksander Machniak 96cee7cd92 Update changelog 8 years ago
Jan Ehrhardt db83952247 Fix seteditraw classic save button (#6164)
Fixes https://github.com/roundcube/roundcubemail/issues/6154
8 years ago
Aleksander Machniak 369fedf313 Fix bug where text: syntax was forced for strings longer than 1024 characters (#6143) 8 years ago
Aleksander Machniak a4de40566d Validate ACL identifiers
... e.g. to prevent cyrus imap issues
8 years ago
Aleksander Machniak 6fb6a0b885 Update localization 8 years ago
Aleksander Machniak 9c542f9cf9 Fix PHP 7.2 Warning: count(): Parameter must be an array or an object that implements Countable 8 years ago
Aleksander Machniak d1327024cc Fix bug where Archive folder wasn't auto-created on login with create_default_folders=true 8 years ago
Aleksander Machniak 471f6a81f3 Fix so temp_dir misconfiguration prints an error to the log (#6045) 8 years ago
Aleksander Machniak c90ad5a977 Fix file disclosure vulnerability caused by insuficient input validation in relation with attachment plugins (#6026) 8 years ago
Thomas Bruederli 2c7f3751ab Update localization files from Transifex 8 years ago
Aleksander Machniak 0dc804a840 Fix decryption of messages encoded with non-ascii charset (#5962) 8 years ago
Thomas Bruederli ec948564da Updated localizations from Transifex 8 years ago
Aleksander Machniak 4829e2849f Enigma: Fix decrypting an encrypted+signed message when signature verification fails (#5914) 8 years ago
Aleksander Machniak f8e6302c85 Fix bug where 'exists' operator was reset to 'contains' (#5899) 8 years ago
Aleksander Machniak 02c7c9fc53 Fix duplicate messages on the list after deleting messages on the next to the last page (#5862)
... also when deleting via 'mark' and 'archive' actions
9 years ago
Aleksander Machniak f483c08ddf Update changelog 9 years ago
Aleksander Machniak 3439fc4159 Managesieve: Fix AM/PM suffix in vacation time selectors 9 years ago
Aleksander Machniak e31d87b311 Move "cursor" position on \r\n sequence after single-dot in a line (#5838) 9 years ago
Aleksander Machniak 0abd84dc02 Fix parsing dot-staffed lines in multiline text (#5838) 9 years ago
Aleksander Machniak c608d063af Fix bug where a.button style from managesieve plugin could impact other elements (#5800) 9 years ago
Aleksander Machniak b7fe41def2 Remove useless box-shadows 9 years ago
Remi Collet 90eafe7eaa Drop ereg dependency, fix compat with PHP 7 (#5820) 9 years ago
Aleksander Machniak fe4c626062 Code optimization, update changelog 9 years ago
Lucas Stevanelli Marin fa566b6b1e Fix bug where zipdownload ignored files with the same name (#5777)
Adding a counter before .(extension) to files with same name on zip.
Before only the last file on message with equals names was added on zip
9 years ago
Aleksander Machniak 73126e6d78 Bump version number 9 years ago
Aleksander Machniak 6bdaada7fa Performance: Skip redundant LISTSCRIPTS command 9 years ago
Aleksander Machniak 0a8fe2ae5b Enigma: Fix compatibility with assets_dir 9 years ago
Aleksander Machniak 3b36ea8529 Update localization 9 years ago
Aleksander Machniak 06abad4d4e Password: Fix security issue in virtualmin and sasl drivers 9 years ago
Thomas Bruederli d4e4cfef92 More flattening of jQuery UI styles 9 years ago
Thomas Bruederli 7969981320 Flattened buttons and icons, removed gradients and box shadows 9 years ago
Aleksander Machniak 757ba8b81a Fix typo 9 years ago
Torkel Bjørnson-Langen 278b46a99d password plugin: better error message on constraint violation (#5727)
If the password policy on the ldap server is violated when changing
password, report error as "constraint violation" instead of the
misleading "connection error".

Only tested with OpenLDAP (v2.4).
9 years ago