Nabble - squirrelmail-announce

ANNOUNCE: SquirrelMail 1.4.16 Released

2008-09-28T07:23:44Z

Hello All,

The SquirrelMail team is happy to announce the release 1.4.16. The most
notable change is that cookies are now sent with the secure attribute set for
HTTPS-connections, meaning that they cannot leak to an HTTP-connection on the
same SquirrelMail installation. For details see the included ReleaseNotes. We
advise users that offer their SquirrelMail both over HTTP and HTTPS to
upgrade.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download

Package md5sums
===============
22dcf999941e644edc3ea467ed3b9e24 squirrelmail-1.4.16.tar.bz2
301657fb532a3351ccffbabed4c0ae54 squirrelmail-1.4.16.tar.gz
707a851edb673c28ef96904250cd3a8f squirrelmail-1.4.16.zip

Package sha1sums
================
61c6676c33209addfc2a33d5db26433ed2a3072a squirrelmail-1.4.16.tar.bz2
5e0d76c9409f0c6d7e85d745ab407981a41a018f squirrelmail-1.4.16.tar.gz
021a928021bf1df67f3900dada9e95e3cee6c365 squirrelmail-1.4.16.zip

*** The SquirrelMail team can use your help! ***
We consist of volunteers developing the most popular open source webmail
client available. To keep up with this quality and to prepare it for the
future, we're looking for people to join or team! The project offers an
interesting challenge on the intersection of the IMAP, SMTP and HTTP
protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies;
* Help sort and fix bugs: interact with submitters, find testcases and
solutions to bugs;
* Support our users by answering questions on the mailinglist or IRC channel;
* Translate SquirrelMail into your language.

For more details, please refer to www.squirrelmail.org/howtohelp

Happy SquirrelMailing!
The SquirrelMail development Team

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

ANNOUNCE: SquirrelMail 1.4.15 Released

2008-05-23T10:56:27Z

Hello All,

It's a pleasure to be able to announce the release of SquirrelMail 1.4.15,
which is a bugfix release. It contains an assortment of bugfixes that have
been made during the past months by the SquirrelMail team.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download

*** The SquirrelMail team can use your help! ***
We consist of volunteers developing the most popular open source webmail
client available. To keep up with this quality and to prepare it for the
future, we're looking for people to join or team! The project offers an
interesting challenge on the intersection of the IMAP, SMTP and HTTP
protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies;
* Help sort and fix bugs: interact with submitters, find testcases and
solutions to bugs;
* Support our users by answering questions on the mailinglist or IRC channel;
* Translate SquirrelMail into your language.

For more details, please refer to www.squirrelmail.org/howtohelp

Package md5sums
===============
87b466fef98e770307afffd75fe25589 squirrelmail-1.4.15.tar.gz
22164ce827edafd0afd65763d2a0f096 squirrelmail-1.4.15.tar.bz2
8fca8c24a133313fa3cbeb91217301d8 squirrelmail-1.4.15.zip

Package sha1sums
================
fbccc42433dddfc85842e51e27e25d9f98b84547 squirrelmail-1.4.15.tar.gz
5387e8647ada27d9850c5d2f6a5fdf7dbb6b5862 squirrelmail-1.4.15.tar.bz2
c9b4fd1610abfe76eaa327b133f10df098c7a701 squirrelmail-1.4.15.zip

Happy SquirrelMailing!
The SquirrelMail development Team

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

ANNOUNCE: SquirrelMail 1.4.15 Release Candidate 1 available

2008-05-12T11:39:48Z

Hello All,

It's a pleasure to be able to announce the availability of the first Release
Candidate of SquirrelMail 1.4.15. A release candidate is intended as the
final public verification that a version is all right before it's
declared "stable". Please try it out and report any bugs to us.

The release candidate can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download.php

Package md5sums
===============
eae23ab4bd3bbaa4a0bdbb7ca22f3fab squirrelmail-1.4.15-rc1.tar.bz2
7f747408ea0ed206dae244c592e9d33c squirrelmail-1.4.15-rc1.tar.gz
7e9bca65e3ff677bfa6d8825e6e754b9 squirrelmail-1.4.15-rc1.zip

Happy SquirrelMailing!
The SquirrelMail development Team

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

ANNOUNCE: SquirrelMail 1.4.13 Released

2007-12-14T10:59:08Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

Due to the package compromise of 1.4.11, and 1.4.12, we are forced to
release 1.4.13 to ensure no confusions. While initial review didn't
uncover a need for concern, several proof of concepts show that the
package alterations introduce a high risk security issue, allowing
remote inclusion of files. These changes would allow a remote user the
ability to execute exploit code on a victim machine, without any user
interaction on the victim's server. This could grant the attacker the
ability to deploy further code on the victim's server.

We *STRONGLY* advise all users of 1.4.11, and 1.4.12 upgrade
immediately.

Package MD5s
============
1a1bdad6245aaabcdd23d9402acb388e squirrelmail-1.4.13.tar.bz2
51ddd67a7ff9272f5a6e1da0b9dfbf18 squirrelmail-1.4.13.tar.gz
ed8871a693cc57d5a0d511f7b89f8781 squirrelmail-1.4.13.zip

We apologies for the inconvenience this may have caused.

- --
Happy SquirrelMailing!
The SquirrelMail Development Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFHYtKBK4PoFPj9H3MRAjiUAKDxM5V8J6vLEUAn7dfiIa1HYwKIWQCfYTbA
3nk8LOfqcBHfZ3IvEOXoOCo=
=USb7
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SECURITY: 1.4.12 Package Compromise

2007-12-13T08:49:40Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

It has been brought to our attention that the MD5 sums for the 1.4.12
package were not matching the actual package. We've been
investigating this issue, and uncovered that the package was modified
post release. This was believed to have been caused by a compromised
account from one of our release maintainers.

Further investigations show that the modifications to the code should
have little to no impact at this time. Modifications seemed to be
based around a PHP global variable which we cannot track down. The
changes made will most likely generate an error, rather than a
compromise of a system in the event the code does get executed.

Original packages, stored on secure media, have been restored to the
Sourceforge download servers, and additional signatures for the
packages are now available on the SquirrelMail download page at
http://www.squirrelmail.org/download.php

While we believe the changes made should have little impact, we
strongly recommend everybody that has downloaded the 1.4.12 package
after the 8th December, to redownload the package.

The code modifications did not made it into our source control, just
the final package. We are currently investigating older packages to
see if they were also compromised.

Once again, the original package MD5s are:
ea5e750797628c9f0f247009f8ae0e14 squirrelmail-1.4.12.tar.bz2
d17c1d9f1ee3dde2c1c21a22fc4f9d0e squirrelmail-1.4.12.tar.gz
3f6514939ea1ebf69f6f8c92781886ab squirrelmail-1.4.12.zip

We apologies for the inconvenience this may have caused.

For any further issues, please contact myself, or the security list
security@...

- --
Happy SquirrelMailing!
The SquirrelMail Development Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFHYWKoK4PoFPj9H3MRAjfTAKC0EFUlROK6RLvKy/jdfFjrl3t3hACcDc77
XBPILcvZEu4nNbemwxU8j1I=
=FJzo
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

RELEASE: SquirrelMail 1.4.12

2007-12-04T21:45:25Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello All,

It's my pleasure to announce the release of SquirrelMail 1.4.12. This
release is a bug fix release, including a critical bug in the handling
of attachments.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download.php

Package md5sums
===============
ea5e750797628c9f0f247009f8ae0e14 squirrelmail-1.4.12.tar.bz2
d17c1d9f1ee3dde2c1c21a22fc4f9d0e squirrelmail-1.4.12.tar.gz
3f6514939ea1ebf69f6f8c92781886ab squirrelmail-1.4.12.zip

- --
Happy SquirrelMailing!
The SquirrelMail development team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFHVjr7K4PoFPj9H3MRAu0ZAJwOOSZ7pog6I3ydQXPWod+xiHZA/wCgg4AL
TFxQQ53Vaph8FsLf6LskKMY=
=6DYd
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell. From the desktop to the data center, Linux is going
mainstream. Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

ANNOUNCE: SquirrelMail 1.4.11 Released

2007-09-29T02:24:35Z

Hello All,

It's a pleasure to be able to announce the release of SquirrelMail 1.4.11,
which is a bugfix and stability release. It contains an assortment of
bugfixes that have been made during the past months by the SquirrelMail team,
and improves the handling of strangely-formed mail messages or picky
mailservers.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download.php

Package md5sums
===============
486fb27a6ab306088603163160dbc8ca squirrelmail-1.4.11.tar.bz2
869bece15e1aefe3769269e222bf7e0f squirrelmail-1.4.11.tar.gz
7db9ce40d2995031ec7a5eaa0d32c230 squirrelmail-1.4.11.zip

Happy SquirrelMailing!
The SquirrelMail development Team

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

SquirrelMail 1.4.10 Updated (1.4.10a)

2007-05-10T03:09:07Z

Hello All,

Shortly after the release of SquirrelMail 1.4.10, a regression in the compose
form was discovered. Unfortunately the limited disclosure of security patches
does not allow for public testing, so this regression went unnoticed. We're
sorry for the inconvenience.

If you've already downloaded and installed version 1.4.10, a patch for 1.4.10a
is available here:
http://www.squirrelmail.org/patches/1.4.10-security/1.4.10-1.4.10a.patch
If you've not yet updated to 1.4.10, you can continue straigt on to 1.4.10a.

Package md5sums
===============

d06c473c83e756493ad8ebe94d8d803b squirrelmail-1.4.10a.tar.gz
298aaa1811b3fb40a803a6f57b22be20 squirrelmail-1.4.10a.tar.bz2
feedb1456d03c4e9723e9b32318aa636 squirrelmail-1.4.10a.zip

Download at:

http://www.squirrelmail.org/download.php

Happy SquirrelMailing!

--
Thijs Kinkhorst
SquirrelMail Project Team

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

SquirrelMail 1.4.10 Released

2007-05-09T09:34:12Z

Hello All,

The SquirrelMail Project Team is proud to announce the release of
SquirrelMail 1.4.10. This version is a security release.

This version, 1.4.10 is a maintenance release, addressing
the following problems since 1.4.9a:
- Some security fixes (see below)
- Small enhancements
- A collection of bugfixes and stability enhancements
(see ChangeLog for a full list)

Security issues
===============

This release addresses security issues found since the release of 1.4.9a:

There's an ongoing battle to further secure the HTML filter against malicious
HTML mail and the browsers that accept almost any malformed piece of HTML.

This release contains fixes for the following:
- HTML attachments containing "data:" URLs;
- Internet Explorer in various versions accepts many permutations of HTML
and JavaScript in many charsets. We now properly canonicalize the incoming
HTML to us-ascii before applying further filters. IE only.
- Request forgery through images. It was possible to include "images" in
HTML mails which were in fact GET requests for the compose.php page sending
mail. These images are now properly detected, and the compose form will only
send mail through a POST request.

Thanks to Mikhail Markin, Tomas Kuliavas and Michael Jordon for reporting
(parts of) these issues and working with us to get them resolved.

These are known as CVE-2007-1262. Further details on SquirrelMail
vulnerabilities can be found at the following address:

http://www.squirrelmail.org/security/

Package md5sums
===============

1c40402a805ee316c157f7ae71d653d6 squirrelmail-1.4.10.tar.gz
6e3ab93e8c3854ba84a03df256ed0f7d squirrelmail-1.4.10.tar.bz2
0768994841d87fe07bd04df0edb15bea squirrelmail-1.4.10.zip

Download at:

http://www.squirrelmail.org/download.php

Happy SquirrelMailing!

--
Thijs Kinkhorst
SquirrelMail Project Team

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

SquirrelMail 1.4.9 translations released

2007-01-06T11:02:27Z

The SquirrelMail Project Team released the new translation packages for
SquirrelMail 1.4.9 and 1.4.9a. You can download packages at the
SquirrelMail site <http://www.squirrelmail.org/download.php>.

Checksums of main packages:

MD5 sums:
eaa0e8835b8d7d451500aad907c22e24 all_locales-1.4.9-20070106.tar.bz2
1bc96d64a6d7904d454540209534c10a all_locales-1.4.9-20070106.tar.gz
c12e2b4615cdcf9e0bf60b00b71f121a all_locales-1.4.9-20070106.zip
b59be8696cbdb05a7684f8a53466e8b8 locales-1.4.9-20070106-src.tar.bz2
b2742f9a0030df68c0918a2ed604cbe8 locales-1.4.9-20070106-src.tar.gz
884775cdfdc01e07c6d590a13d278b2e locales-1.4.9-20070106-src.zip

SHA1 sums:
d187a9b77384b398a0945f51aaaf248379fdfa15 all_locales-1.4.9-20070106.tar.bz2
718fc4bfa9504f169f2e8498e84e1bc1831e50e6 all_locales-1.4.9-20070106.tar.gz
f36c91691a948e742b32e90c821e647f3ab462be all_locales-1.4.9-20070106.zip
3cf37fd93ec81c9a694617dc20781434564d17a7 locales-1.4.9-20070106-src.tar.bz2
8d1b4bfdca2a157e5f424b7ec1cace6f6a33540b locales-1.4.9-20070106-src.tar.gz
817a8f8c6eb3b19e0919ce8130d4b0de50f6fb5f locales-1.4.9-20070106-src.zip

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.9a Released

2006-12-03T17:25:21Z

Hello All,

The SquirrelMail Project Team is proud to announce the release of
SquirrelMail 1.4.9a. This version is a security release.

The day after we released SquirrelMail 1.4.9 new cross site scripting
issues were reported and immediately fixed. Therefor the decision to
release 1.4.9a so short after the 1.4.9 release.

1.4.9 and 1.4.9a is addressing
the following problems since 1.4.8:
- Some security fixes (see below)
- Small enhancements
- A collection of bugfixes (see ChangeLog)

Security issues
===============
This release addresses security issues found since the release of 1.4.8:

Cross site scripting via malicious input the mailto parameter of
webmail.php, the session and delete_draft parameters of compose.php and
via a shortcoming in the magicHTML filter.

This is CVE-2006-6142. Thanks for Martijn Brinkers for his continued research
that uncovered these issues.

We've also changed SquirrelMail attachment handling to work around an issue
in Internet Explorer: the browser will attempt to guess the MIME type of
attachments based on content, not the MIME header we send. Attachments could
fake to be an 'harmless' image/jpeg, while they were in fact HTML that
Internet Explorer would render.

After release 1.4.9 Martijn Brinkers again discovered new cross site
scripting issues in the magicHtml filter. The new discovered security issues
have to do with the wide intepretation of the words expression and url by IE
browsers. As second issue Martijn Brinkers that the @import statement in
stylesheets could be misused.

Further details on SquirrelMail vulnerabilities can be found at the
following address:

http://www.squirrelmail.org/security/

Package md5sums
===============

3adf66bfe2e816ba8375cf811d8ef3f6 squirrelmail-1.4.9a.tar.bz2
5b19f8cc5badef91d1f2410df41564bc squirrelmail-1.4.9a.tar.gz
a9e108418b0a42763a1d29a267fa7168 squirrelmail-1.4.9a.zip

Download at:

http://www.squirrelmail.org/download.php

Happy SquirrelMailing!

--
Marc Groot Koerkamp
SquirrelMail Project Team

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

Re: [SM-DEVEL] SquirrelMail 1.4.9 Released

2006-12-02T14:23:03Z

All,

Minor typo: This release is version 1.4.9 of course, not 1.4.7. It
addresses issues contained in version 1.4.8 and lower. :-)

Happy Squirreling!

Paul Lesniewski
SquirrelMail Project Team

> The SquirrelMail Project Team is proud to announce the release of
> SquirrelMail 1.4.7. This version is a maintenance release, addressing
> the following problems since 1.4.6:
> - Some security fixes (see below)
> - Small enhancements
> - A collection of bugfixes (see ChangeLog)
>
> Security issues
> ===============
>
> This release addresses security issues found since the release of 1.4.8:
>
> Cross site scripting via malicious input the mailto parameter of
> webmail.php, the session and delete_draft parameters of compose.php and
> via a shortcoming in the magicHTML filter.
>
> This is CVE-2006-6142. Thanks for Martijn Brinkers for his continued
> research that uncovered these issues.
>
> We've also changed SquirrelMail attachment handling to work around an
> issue in Internet Explorer: the browser will attempt to guess the MIME
> type of attachments based on content, not the MIME header we send.
> Attachments could fake to be an 'harmless' image/jpeg, while they were
> in fact HTML that Internet Explorer would render.
>
> Further details on SquirrelMail vulnerabilities can be found at the
> following address:
>
> http://www.squirrelmail.org/security/
>
> We strongly encourage any persons uncovering security issues to
> contact the SquirrelMail team via security <at> squirrelmail.org.
>
> Package md5sums
> ===============
>
> b3dc6e3c5accb9b88bf6ebfd87336b96 squirrelmail-1.4.9.tar.bz2
> 5a3ecbda6d8378c68fa40b4ac5b2d487 squirrelmail-1.4.9.tar.gz
> 875848f25d481b59552d4e93aaacba4c squirrelmail-1.4.9.zip
>
>
> Download at:
>
> http://www.squirrelmail.org/download.php
>
> Happy SquirrelMailing!
>
> --
> Thijs Kinkhorst
> SquirrelMail Project Team

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.9 Released

2006-12-02T07:48:45Z

Hello All,

The SquirrelMail Project Team is proud to announce the release of
SquirrelMail 1.4.7. This version is a maintenance release, addressing
the following problems since 1.4.6:
- Some security fixes (see below)
- Small enhancements
- A collection of bugfixes (see ChangeLog)

Security issues
===============

This release addresses security issues found since the release of 1.4.8:

Cross site scripting via malicious input the mailto parameter of
webmail.php, the session and delete_draft parameters of compose.php and
via a shortcoming in the magicHTML filter.

This is CVE-2006-6142. Thanks for Martijn Brinkers for his continued
research that uncovered these issues.

We've also changed SquirrelMail attachment handling to work around an
issue in Internet Explorer: the browser will attempt to guess the MIME
type of attachments based on content, not the MIME header we send.
Attachments could fake to be an 'harmless' image/jpeg, while they were
in fact HTML that Internet Explorer would render.

Further details on SquirrelMail vulnerabilities can be found at the
following address:

http://www.squirrelmail.org/security/

We strongly encourage any persons uncovering security issues to
contact the SquirrelMail team via security <at> squirrelmail.org.

Package md5sums
===============

b3dc6e3c5accb9b88bf6ebfd87336b96 squirrelmail-1.4.9.tar.bz2
5a3ecbda6d8378c68fa40b4ac5b2d487 squirrelmail-1.4.9.tar.gz
875848f25d481b59552d4e93aaacba4c squirrelmail-1.4.9.zip

Download at:

http://www.squirrelmail.org/download.php

Happy SquirrelMailing!

--
Thijs Kinkhorst
SquirrelMail Project Team

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

signature.asc (196 bytes) Download Attachment

SquirrelMail 1.4.8 translation updates released

2006-09-03T12:14:42Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released new translation packages for
SquirrelMail 1.4.8 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Checksums of main packages

MD5 sums:
f8a042fd6b3ea68a3da49c3398224205 all_locales-1.4.8-20060903.tar.bz2
9663541d129cc00e57fac7a92378122b all_locales-1.4.8-20060903.tar.gz
aea1c0a6211da5469286abc37b62a044 all_locales-1.4.8-20060903.zip
9874e86a4e2144b25d351267a8de52fd locales-1.4.8-20060903-src.tar.bz2
e185991a28949e57faee45035ecc1b38 locales-1.4.8-20060903-src.tar.gz
7cb23b64aa2bed299c1055693f517bd6 locales-1.4.8-20060903-src.zip

SHA1 sums:
dcfe8084c99033e12da7b813cb83fd757af7b0b6
all_locales-1.4.8-20060903.tar.bz2
5d1df8a6cefe1700b5e4c955ea93df424d11830f
all_locales-1.4.8-20060903.tar.gz
b698a826a7d7a62a8545b07bfd204476fc6bf5fc
all_locales-1.4.8-20060903.zip
7d40e00d72a72b1b39110672e25a66c5e59040cf
locales-1.4.8-20060903-src.tar.bz2
2660d6bb9d346c47fa082806ba34594b02b8a572
locales-1.4.8-20060903-src.tar.gz
ed9520dedf7cf271c54de4a3cd5f625a1a490d4c
locales-1.4.8-20060903-src.zip

- --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFE+xuRaYoxl8XwnvYRAsOhAKCWHwhwxm85cgwtd4/tCI3nu/iGDwCgweZn
ad511ltHHlx1zojrcugqRuY=
=HYJS
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.8 released - fixes variable overwriting attack

2006-08-11T06:26:09Z

Hello all,

Today SquirrelMail version 1.4.8 has been released with a collection of
bugfixes and an important security fix. It was possible for an
authenticated user to overwrite random variables in the compose.php
script. This may open up possible attack vectors like reading or
overwriting a user's preference file or attachments.

We advise all current SquirrelMail users to upgrade. There's also a
patch available against 1.4.7. The interesting thing is that the
function that contained the flaw was actually broken. The function is
used to resume a compose session of a user that is confronted with a
session timeout after composing a long mail. We've got two patches
available: a minimal one which just removes the code, since it was
broken anyway, and a full version that repairs the functionality and
closes the hole.

SquirrelMail can be downloaded here:
http://www.squirrelmail.org/download.php
The patches can be found here:
http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-minimal.patch
http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-full.patch
They also apply against the current development version.

We'd like to thank James Bercegay of GulfTech Security Research for
finding this issue and reporting it to us.

Happy SquirrelMailing!

Thijs Kinkhorst
on behalf of the SquirrelMail team

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

signature.asc (196 bytes) Download Attachment

SquirrelMail 1.4.7 Released

2006-07-04T14:11:35Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello All,

The SquirrelMail Project Team is proud to announce the release of
SquirrelMail 1.4.7. This version is a maintenance release, addressing
the following problems since 1.4.6:
- - Minor security fixes (see below)
- - A lot of bugfixes (see ChangeLog)
- - Added support for Ukrainian

Security issues
===============

This release addresses two different security issues found since the
release of 1.4.6, which we consider to be of minor severity, but they
have of course been fixed:

- - It was possible to include a local file through functions/plugin.php
with register_globals enabled, and magic_quotes disabled. However,
running with register_globals enabled is completely unnecessary and a
well-known security hazard. We've now changed the code such that when
register_globals is enabled, all globals are deregistered. Reported by
Denix Solutions, thanks!

- - It was possible to steal a cookie of a user that ran on the same base
domain. Since this setup is already inherently insecure we don't think
the impact is big, but the code was of course fixed to also incorporate
the path to SquirrelMail.

Further details on SquirrelMail vulnerabilities can be found at the
following address:

http://www.squirrelmail.org/security/

We strongly encourage any persons uncovering security issues to
contact the SquirrelMail team via security <at> squirrelmail.org.

Package md5sums
===============

08301f14d71e4452e93f21b5e6747a4a squirrelmail-1.4.7.tar.bz2
f53c91d7799cd8fd9d0550f2cc7a8815 squirrelmail-1.4.7.tar.gz
32688d817c6dc537ea8d3b9e84f47d4c squirrelmail-1.4.7.zip

4b78f4612ef0a68e5a81a818a113497c all_locales-1.4.7-20060702.tar.bz2
d89415a37ebb83e5910a8f7b3219a0be all_locales-1.4.7-20060702.tar.gz
18cb3083488f26cd7e99daf16a497fc1 all_locales-1.4.7-20060702.zip

- --
Tomas Kuliavas
The SquirrelMail Project Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEqst2aYoxl8XwnvYRAj02AJ0YiYIzdrh9VQTh7FdP76VEgUjO3QCfVwaL
wy4ixnh6UorXuNwpQLZisgE=
=VA8Q
-----END PGP SIGNATURE-----

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.6 translation updates released

2006-04-10T11:48:53Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released new translation packages for
SquirrelMail 1.4.6 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Information about main updates:
* added Ukrainian translation by Serhij Dubyk
* fixed some Japanese and French translation strings
* updated Geogian and Norwegian Nynorsk translations
* updated some plugin translations

Ukrainian translation needs some modification in stock SquirrelMail
1.4.6 functions/i18n.php file. Modified file and patch are included in
package.

Checksums of main packages

MD5 sums:
* 24528f477061400d2b457be2ee819c69
all_locales-1.4.6-20060409.tar.bz2

* 70508bf22c320103beef344591e28973
all_locales-1.4.6-20060409.tar.gz

* 8cf2b7209c4c5be75418addf23440114
all_locales-1.4.6-20060409.zip

* 59bf0e99dd0e57d0329e9eacb679a83c
locales-1.4.6-20060409-src.tar.bz2

* ddd0e3245683ba44211d9ea49681cba1
locales-1.4.6-20060409-src.tar.gz

* f406db532ecc6a09155580da9beebf39
locales-1.4.6-20060409-src.zip

SHA1 sums:
* 4a6b748d4558c516a0c65b6889ce4ab32876a7eb
all_locales-1.4.6-20060409.tar.bz2

* 5f369e0ac3e02f265854363281ec341e4dd1a356
all_locales-1.4.6-20060409.tar.gz

* 8c6989b7f0059f44c6959f70ab6e913b7c1d7f29
all_locales-1.4.6-20060409.zip

* 086c206cc0d6793c966a426d6daea8d4a2e23bbe
locales-1.4.6-20060409-src.tar.bz2

* 2434dcd5ca2cffc4c82c5c121f58f10386116320
locales-1.4.6-20060409-src.tar.gz

* 8bf924a86b852cbba94dc01aaa2cebd6168d1a0a
locales-1.4.6-20060409-src.zip

- --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEOpqEaYoxl8XwnvYRAm7sAKCyXhoI83Z42ljbh/i6e4IOJn+ykQCfTBX7
z/uhtWCNVlrlVoayTonXQ3I=
=Yigg
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.5.1 translation updates released

2006-04-10T11:25:29Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released new translation packages for
SquirrelMail 1.5.1 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Checksums of main packages

MD5 sums:
* 739e6e1f29a8e3177b083c1971bbe358
all_locales-1.5.1-20060409.tar.bz2

* 32946a396a96c3e2c6619d07f66c2743
all_locales-1.5.1-20060409.tar.gz

* c5ec37cb53047582d6cbcf181a758195
all_locales-1.5.1-20060409.zip

* 3265012a6f8746d5a1949fbb3ec4a87a
locales-1.5.1-20060409-src.tar.bz2

* a1ebe91fa403dc2451c0ee8d9d9408e6
locales-1.5.1-20060409-src.tar.gz

* f05e444c769825831c75048d62669b74
locales-1.5.1-20060409-src.zip

SHA1 sums:
* 74c5321f5269f980e7e7adb33b376a0637798e9f
all_locales-1.5.1-20060409.tar.bz2

* 150aed5c7b27009c6a0073a44cb6fa0a9fcf3561
all_locales-1.5.1-20060409.tar.gz

* cb2b972ade07abd78c8ad4bb22b45135c803ac04
all_locales-1.5.1-20060409.zip

* a1a7c8d348e5c67c1e9b3688d8d2f36fc8167bcf
locales-1.5.1-20060409-src.tar.bz2

* 00b19f6189aab6e68af54013fa88388b40a754a6
locales-1.5.1-20060409-src.tar.gz

* cbf77ba11d89ba647d8f3ce732f875199ce797e6
locales-1.5.1-20060409-src.zip

- --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEOpUJaYoxl8XwnvYRAu+eAKCdLuR7PnFSCTfawiAAs3CNS73NZwCgupHf
Tv8/SElWxOUUay8Jlmiysfs=
=qINo
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.6 translations released

2006-02-24T10:48:39Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released translation packages for
SquirrelMail 1.4.6 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Checksums of main packages

MD5 sums:
* 29dfec2e0f71fba368a89c36c51881c2
all_locales-1.4.6-20060221.tar.bz2

* d80e36431440eafdbc3142dd71811b5a
all_locales-1.4.6-20060221.tar.gz

* 5f934b7cdee22042bc2fef6178ec5135
all_locales-1.4.6-20060221.zip

* 55964cd68f93dd2fe0eba19e1d2b6b0b
locales-1.4.6-20060221-src.tar.bz2

* 0dfa7bc01e77d5eec9aba176b1465025
locales-1.4.6-20060221-src.tar.gz

* eb3e17ac4f1141b3fd04a108c7a21e6e
locales-1.4.6-20060221-src.zip

SHA1 sums:
* 110dbcd216005138fd8415b569b5b93fb929977e
all_locales-1.4.6-20060221.tar.bz2

* 5c53ed7fc3b3a8ae0521e48ad70455eb500d0ae9
all_locales-1.4.6-20060221.tar.gz

* 74e79ef72b3e9f8fcdadccf1cfb0802d4c485c5a
all_locales-1.4.6-20060221.zip

* b6a0c19834a54de2e42428207ddb258b5e1fcfa4
locales-1.4.6-20060221-src.tar.bz2

* c68aa1612d730077889379b5f35b1e7e5d3b40ab
locales-1.4.6-20060221-src.tar.gz

* 27105602db65cc289aafdfa475053d2b78c7e2ad
locales-1.4.6-20060221-src.zip

- --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFD/1UGaYoxl8XwnvYRAvm8AKCJ3OiAcF1BR4zB2gpUUHBWKEttYQCbB2lu
6wYDlK3wftewrxAMEYuenbk=
=LvX5
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.6 Released

2006-02-23T14:01:59Z

Hello All,

It is my proud pleasure to announce the final release of SquirrelMail
1.4.6.

This release is very important, and we strongly advise everybody to
update to the latest release.

Security Update
===============
This version contains a number of security updates that were brought
to our attention via a number of sources.

- In webmail.php, the right_frame parameter was not properly sanitized
to deal with very lenient browsers, which allowed for cross site
scripting or frame replacing. [CVE-2006-0188]

- In the MagicHTML function, some very obscure constructs were
discovered to be exploitable: 'u\rl' was interpreted as 'url' (privacy
concern), and comments could be inside keywords (allows for cross site
scripting). Both only affect Internet Explorer users. Found by Martijn
Brinkers and Scott Hughes. [CVE-2006-0195]

- The function sqimap_mailbox_select did not strip newlines from the
mailbox parameter, and thereby allowed for IMAP command injection.
Found by Vicente Aguilera. [CVE-2006-0377]

Further details on SquirrelMail vulnerabilities can be found at the
following address:

http://www.squirrelmail.org/security/

We strongly encourage any persons uncovering Security issues to
contact the SquirrelMail team via security@....

In This Release
===============
This release contains mostly bug fixes, including corrections for PHP
behaviour changes in file handling, and some data types. Especially
running SquirrelMail on the most recent PHP versions should be much
improved.

For further information about the changes involved in this release,
please see the ChangeLog and ReleaseNotes files included with the
release.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download.php

Happy SquirrelMailing
The SquirrelMail development Team

signature.asc (196 bytes) Download Attachment

SquirrelMail 1.5.1 translations released

2006-02-19T07:00:21Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released translation packages for
SquirrelMail 1.5.1 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Checksums of main packages

MD5 sums:
* ea311416ba9a96352a0728f5a7611102
all_locales-1.5.1-20060219.tar.bz2

* 10d7e98bfacb3f000e7402ea8e19368e
all_locales-1.5.1-20060219.tar.gz

* e2860bb07371764e8696ca46694eecc1
all_locales-1.5.1-20060219.zip

* 1e20ae4b083decc33057dab44676dc87
locales-1.5.1-20060219-src.tar.bz2

* 9d456578819212263185c77997023e82
locales-1.5.1-20060219-src.tar.gz

* 7ab7255ba2074e32a337723e6f951d63
locales-1.5.1-20060219-src.zip

SHA1 sums:
* 77d2f0f4328ff546076181fa5c54b64ce8994888
all_locales-1.5.1-20060219.tar.bz2

* 0bd8fa9db4712235d358640d1b5999b4db67bb77
all_locales-1.5.1-20060219.tar.gz

* 0f5f3b077bbd729aa3733d67bf2ed107b9eb0a8f
all_locales-1.5.1-20060219.zip

* 268cedbda5cce88521b354babd70aaa079455518
locales-1.5.1-20060219-src.tar.bz2

* 90317abccc3a44ae493cbed35d11855a09dd701e
locales-1.5.1-20060219-src.tar.gz

* f6d62a78afef392be00d4de96329e10e065cd660
locales-1.5.1-20060219-src.zip

- - --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFD+IgFaYoxl8XwnvYRAgY5AJ9PINdBAD1UvMS35CwK0SUa+a0W4QCeOkKO
viriavY8gN9HgvK0m9LGuPw=
=+0AE
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

ANNOUNCE: SquirrelMail 1.5.1 Released

2006-02-19T05:26:12Z

Hello List,

The SquirrelMail Team is proud to announce the release of SquirrelMail
1.5.1! This is the second release of the development 1.5.x series. This
release contains many updates like improved performance, PHP5 support,
interface tweaks and preliminary template support.

For more info see the release notes
(http://sourceforge.net/project/shownotes.php?group_id=311&release_id=394739).
To grab your copy, go to http://www.squirrelmail.org/download.php.

Regards,

Marc Groot Koerkamp
Squirrelmail Development Leader.

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.6rc1 translation package released

2005-12-12T19:37:26Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SquirrelMail Internationalization Team released translation package for
SquirrelMail 1.4.6rc1 version.

This version contains updates in Dutch, Estonian and Faroese translations
and plugin string updates. Special thanks to Tanel Kindsigo for Estonian
translation updates. Other pending translation updates should be available
in newer 1.4.6 translation packages.

Main package md5sums:
* all_locales-1.4.6rc1-20051212.tar.bz2
016f41abaee2c1a9d9f4b3c0bd8efbea
* all_locales-1.4.6rc1-20051212.tar.gz
a4cea13ede50a1ed1de23f75c73bdf66
* all_locales-1.4.6rc1-20051212.zip
11e960843f11616e328d532a780d266a

Main package sha1sums:
* all_locales-1.4.6rc1-20051212.tar.bz2
9cbbdc38b3cd391fc5e21e704e0199cf90d8d906
* all_locales-1.4.6rc1-20051212.tar.gz
9ea569368a5887b5618fe426c5cd5335de9e57ba
* all_locales-1.4.6rc1-20051212.zip
646c0479afefc4e31d606f9800f4f04b3a51dd25

Other packages can be found on SquirrelMail SourceForge file repository.
http://sourceforge.net/project/showfiles.php?group_id=311&package_id=110388&release_id=377647

Md5sums and sha1sums are attached to this email. They can also be found on
http://www.squirrelmail.org/sums/all_locales-1.4.6rc1-20051212.md5
http://www.squirrelmail.org/sums/all_locales-1.4.6rc1-20051212.sha1

- --
SquirrelMail Development Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)

iD8DBQFDnkH6K4PoFPj9H3MRAsXKAKDKMu+MuXuZkmkgOL0MfP+6NaD21QCeLKzY
9MgOPI5zCj2ysmOg7OuTPTs=
=WIED
-----END PGP SIGNATURE-----

all_locales-1.4.6rc1-20051212.sha1 (12K) Download Attachment
all_locales-1.4.6rc1-20051212.md5 (11K) Download Attachment

[SM-DEVEL] ANNOUNCE: SquirrelMail 1.4.6 Release Candidate 1 available

2005-12-10T13:44:01Z

The SquirrelMail team is happy to announce that a testing version has
been released for the stable series: 1.4.6 Release Candidate 1. This
release candidate addresses many bugs found since the release of our
previous version.

Details on all the changes in this release can be found in the
ChangeLog: http://www.squirrelmail.org/changelog.pgp
To grab your copy, go to the Download page at:
http://www.squirrelmail.org/download.php

A package for Debian will be available shortly in Debian's
'experimental' distribution.

Please let us know how this RC works for you, so we can fix any problems
in time for 1.4.6-release. You can use our bugtracker at
http://www.squirrelmail.org/bugs , IRC #squirrelmail at
irc.freenode.org, or post to our development mailinglist at
squirrelmail-devel@....

Happy SquirrelMailing!

The SquirrelMail development team

signature.asc (196 bytes) Download Attachment

[SM-DEVEL] SquirrelMail Extra decoding library released

2005-11-08T20:14:50Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The SquirrelMail Project Team released Extra decoding library.

This is the first stable extra decoding library package release.

SquirrelMail decoding functions are used to display and convert messages
encoded in different character sets. Extra decoding library provides support
of some complex Eastern character sets and some rarely used Apple character
sets. Current release supports Big5, Windows-874 (cp874, Thai), Windows-949
(UHC, Korean), EUC-CN, EUC-JP, EUC-KR, EUC-TW, GB18030, GB2312, ISO-2022-CN,
ISO-2022-JP, ISO-2022-JP-2, ISO-2022-KR, Shift_JIS and various x-mac-*
character sets.

Extra decoding library can be used in SquirrelMail 1.4.4 or newer. It
depends on sq_is8bit() function. In order to optimize decoding of Eastern
character sets, PHP installation needs recode (http://www.php.net/recode)
or iconv (http://www.php.net/iconv) support. Some decoding functions can
use mbstring functions present in php 4.3.0. Mbstring decoding needs
sq_mb_list_encodings() function from SquirrelMail 1.5.1 or 1.4.6.

Some decoding code that be activated only when $aggressive_decoding variable
is set to true. This variable should be enabled only on smaller systems,
that don't call aggressive decoding functions very often. Turning on
$aggressive_decoding variable by default in packaged SquirrelMail versions
is not recommended.

If you find bugs in this library, report them in SquirrelMail bug tracker
(http://www.squirrelmail.org/bugs). Developers will need information about
PHP version, PHP recode, iconv and mbstring extensions, used SquirrelMail
version, any modification made in functions/i18n.php and mbstring
extension settings.

You can find packages on the Download page.

Package md5sums:
4793c94361d448831f28dcaab7ce5ad2 squirrelmail-decode-1.0.tar.bz2
2474774d0fee733d518b64f881a0f587 squirrelmail-decode-1.0.tar.gz
3396e9734f8de2b5dd0e96d3ce4e72ec squirrelmail-decode-1.0.zip

Package sha1sums:
5a8942d9b058feaa756d3d04bb47719acc1201c6 squirrelmail-decode-1.0.tar.bz2
93afe60bbbf1a050d3e1b7bbcbeaa38447439669 squirrelmail-decode-1.0.tar.gz
c47aa5ae421b0208bb3fb42021b3eddf9760f1af squirrelmail-decode-1.0.zip

- --
The SquirrelMail Project Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkNxd7kACgkQK4PoFPj9H3PRMQCg7e3wt0eRwNDc52LzgPomVhTn
erEAoK1csAYa3AM1TFP7RVjr7ire9lGp
=dYUB
-----END PGP SIGNATURE-----

-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
--
squirrelmail-devel mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-devel@...
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.devel
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_idq39
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel