Skip to content

Debian Changelog imp4 (4.3.7+debian0-2.1)

2010

imp4 (4.3.7+debian0-2.1) unstable; urgency=low

   * Non-maintainer upload by the Security Team
   * Fix XSS (Closes: #598584)

 -- Moritz Muehlenhoff <jmm@debian.org>  Sat, 23 Oct 2010 16:49:35 +0200

imp4 (4.3.7+debian0-2) unstable; urgency=medium

   * Backport patches from Horde CVS (http://bugs.horde.org/ticket/8836) to turn
     off DNS prefetching when displaying untrusted content. See CVE-2010-0463
     for more information. (Closes: #569661)
   * Update to standards version 3.8.3, no further required changes.

 -- Gregory Colpart <reg@debian.org>  Sat, 10 Jul 2010 17:34:29 +0200

imp4 (4.3.7+debian0-1) unstable; urgency=low

   * New upstream release.
   * Remove ispell from Suggests: (Closes: #570294)

 -- Gregory Colpart <reg@debian.org>  Sat, 22 May 2010 16:42:04 +0200

2009

imp4 (4.3.6+debian0-2) unstable; urgency=low

   * Add call to dh_link (See #562138)

 -- Mathieu Parent <sathieu@debian.org>  Sat, 26 Dec 2009 00:26:51 +0100

imp4 (4.3.6+debian0-1) unstable; urgency=low

   * New upstream release.
   * Added a check in debian/rules to make sure that external libs are not
     in the orig.tar.gz
   * Reverted "When using Kolab, other mail servers are removed"
   * Replace config symlink by update-alternatives to allow configuration
     packages

 -- Mathieu Parent <sathieu@debian.org>  Sun, 20 Dec 2009 17:49:37 +0100

imp4 (4.3.5+debian0-1) unstable; urgency=low

   [ Gregory Colpart ]
   * New upstream release.
   * Change Vcs-Browser field (migrate a --bare git repository on alioth).
   * Update to standards version 3.8.3, no further required changes.
 
   [ Mathieu Parent ]
   * Added me to uploader
   * When using Kolab, other mail servers are removed
     (See https://www.intevation.de/roundup/kolab/issue3758)
   * Change my email address, as I am now Debian developer

 -- Gregory Colpart <reg@debian.org>  Tue, 20 Oct 2009 02:46:32 +0200

imp4 (4.3.4+debian0-1) unstable; urgency=low

   * New upstream release.
   * This new version fixes some bugs and translations.

 -- Gregory Colpart <reg@debian.org>  Tue, 21 Apr 2009 01:53:16 +0200

imp4 (4.3.3+debian0-1) unstable; urgency=low

   * New upstream release.
   * This new version has a lot of fixes and improvements, and includes some
     changes backported previously.
   * We use now Git, add Vcs-* in debian/control.
   * Update to standards version 3.8.1, no further required changes.
   * Update debian/watch file (we use now repacked upstream sources).

 -- Gregory Colpart <reg@debian.org>  Sun, 12 Apr 2009 03:01:01 +0200

imp4 (4.2-4) unstable; urgency=high

   * Include patches from Horde upstream to fix unescaped output in several
     scripts (imp/{smime,pgp}.php and message.php). (Closes: #513266)

 -- Gregory Colpart <reg@debian.org>  Thu, 29 Jan 2009 02:38:27 +0100

2008

imp4 (4.2-3) unstable; urgency=medium

   * Backport a patch from Horde CVS to escape output on test.php file. This
     fix could be considered as a minor XSS issue, see CVE-2008-4182.
     (Closes: #500553)
   * Change Gregory Colpart's email address in debian/control file.

 -- Gregory Colpart <reg@debian.org>  Sun, 05 Oct 2008 15:23:11 +0200

imp4 (4.2-2) unstable; urgency=low

   * Backport a patch from Horde CVS to correct a bug in compose page.
     Thanks to Marc Dequènes (Duck) <duck@duckcorp.org> for report it.
    (Closes: #496642)

 -- Gregory Colpart (evolix) <reg@evolix.fr>  Mon, 01 Sep 2008 03:12:58 +0200

imp4 (4.2-1) unstable; urgency=low

   * New upstream release.
   * This new version has major changes compared to the previous version:
     mailbox and message caching; rewrite of much of IMP's core libraries; WCAG
     1.0 Priority 2/Section 508 accessibility guidelines compliance; javascript
     improvements/increased functionality; multiple browser windows now works;
     sent mail logging; customizable rate limiting, non-modifiable folders,
     maximum inline display size; symmetric PGP encryption, PGP public key
     fetching from keyservers; auto-complete contact list searching in compose
     screen; RSS/Atom mailbox feeds; IDN support; much improved PHP memory
     usage, better caching, and more efficient IMAP server interaction.
   * Fix confusion between binary-arch and binary-indep in rules.
   * Link some *.js files with libjs-scriptaculous package.
   * No more need to copy CREDITS file in debian/rules.
   * A lot of improvements in debian/copyright file.
   * Update to standards version 3.8.0, no further required changes.
   * Add some remplacements in debian/rules to comply with FHS

 -- Gregory Colpart (evolix) <reg@evolix.fr>  Sun, 15 Jun 2008 13:59:55 +0200

imp4 (4.1.6-1) unstable; urgency=low

   * New upstream release.
   * Add missing CVE-id to 4.1.3-4 changelog.
   * Put the CREDITS file where the online help viewer expects it (See
     #357377). (Closes: #461223)
   * Update to standards version 3.7.3, no further required changes.
   * Bump debhelper compat level to 5.
   * Add Homepage field.
   * Import patch from Horde CVS to fix PHP warning when reporting multiple
     messages as spam (Thanks to Lee Aylward <leedo@prettybrd.com>).
     (Closes: #416577)

 -- Gregory Colpart (evolix) <reg@evolix.fr>  Mon, 21 Jan 2008 00:45:35 +0100

2007

imp4 (4.1.4-1) unstable; urgency=low

   [ Lionel Elie Mamane ]
   * New upstream version
 
   [ Gregory Colpart (evolix) ]
   * Remove locales from Recommends field (now in horde3 recommends)

 -- Gregory Colpart (evolix) <reg@evolix.fr>  Sun, 22 Jul 2007 17:52:30 +0200

imp4 (4.1.3-4) unstable; urgency=high

   * XSS vulneratility fixed, closes: #415117. Thanks to Marcos Marado
     <Marcos.Marado@sonae.com> that provided the patch.
     See CVE-2007-1515 for more information.

 -- Ola Lundqvist <opal@debian.org>  Sat, 24 Mar 2007 21:12:36 +0100

imp4 (4.1.3-3) unstable; urgency=low

   * Permit hiding of deleted messages even when use_trash is on (closes: #406728)

 -- Lionel Elie Mamane <lmamane@debian.org>  Sat, 10 Feb 2007 12:26:11 +0100

imp4 (4.1.3-2) unstable; urgency=medium

   * Depend on php-mail-mime (closes: #408615)

 -- Lionel Elie Mamane <lmamane@debian.org>  Sat, 27 Jan 2007 19:34:08 +0100

2006

imp4 (4.1.3-1) unstable; urgency=low

   * New upstream version. This is a bugfix release to correct
     CVE-2006-4255.
   * Updated to standards version 3.7.2.

 -- Ola Lundqvist <opal@debian.org>  Sun, 3 Sep 2006 12:47:24 +0200

imp4 (4.1.1-2) unstable; urgency=low

   * Put debhelper in Build-Depends, not B-D-Indep.

 -- Lionel Elie Mamane <lmamane@debian.org>  Fri, 16 Jun 2006 10:59:39 +0200

imp4 (4.1.1-1) unstable; urgency=low

   * New upstream version 4.1.1, closes: #356527.

 -- Ola Lundqvist <opal@debian.org>  Mon, 24 Apr 2006 22:12:44 +0200

imp4 (4.0.4-3) unstable; urgency=low

   * Added support for php5-imap as an alternative for php4-imap.

 -- Ola Lundqvist <opal@debian.org>  Sat, 25 Feb 2006 13:18:27 +0100

imp4 (4.0.4-2) unstable; urgency=low

   * Set Maintainer to Debian Horde Team.
   * Make locales package recommended, closes: #320139.
   * Added {arch} to copy exclude list to be able to build from tla
     repository.
   * Added a clean line to debian rules to make sure it is possible to
     build nice with tla-buildpacakge.

 -- Ola Lundqvist <opal@debian.org>  Sun, 19 Feb 2006 15:59:55 +0100

2005

imp4 (4.0.4-1) unstable; urgency=low

   * New upstream release.
   * Added imapproxy to suggests list, closes: #326067.
   * Removed false part about *spell in README.Debian, closes: #326572.
   * Applied patch from Rob Andrews <rob@impure.org.uk> to fix problem
     in Mozilla, closes: #318649.
   * Updated standards version to 3.6.2.
   * Corrected to new FSF address.

 -- Ola Lundqvist <opal@debian.org>  Sat, 5 Nov 2005 16:10:36 +0100

imp4 (4.0.3-1) unstable; urgency=low

   * New upstream release, closes: #304286.

 -- Ola Lundqvist <opal@debian.org>  Sun, 1 May 2005 21:43:26 +0200

imp4 (4.0.2-2) unstable; urgency=low

   * Changed build depends to build depends indep.
   * Changed recommends of aspell, ispell to suggests.
   * Updated README.Debian file to document what you have to do in
     order to make the horde3 web configuration work as expected.
   * Updated rules file to avoid unnecessary copy of COPYING file.
   * Removed empty debian/pre* and debian/post* files.

 -- Ola Lundqvist <opal@debian.org>  Sun, 10 Apr 2005 20:55:08 +0200

imp4 (4.0.2-1) unstable; urgency=low

   * Initial upload of this package, closes: #303114.
   * Updated Maintainer field and made Jose Carlos Medeiros co maintainer.
   * Moved config from etc/horde/imp4/config to etc/horde/imp4.
   * Commented out the www-data security hole that exist in initial configuration.
   * Made sure that ./usr/share/horde3/imp/locale/da_DK/help.xml is
     not executeable.

 -- Ola Lundqvist <opal@debian.org>  Tue, 5 Apr 2005 17:19:20 +0200

imp4 (4.0.2-0) unstable; urgency=low

   * Initial Release, prepared.

 -- Jose Carlos Medeiros <jose@psabs.com.br>  Mon, 21 Feb 2005 15:09:49 -0300