-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 23 Oct 2021 09:47:50 +0200 Source: roundcube Architecture: source Version: 1.5.0+dfsg.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 949629 977687 989140 994446 996613 Changes: roundcube (1.5.0+dfsg.1-1) unstable; urgency=low . * New upstream release. Highlights for major version 1.5 include: - full PHP 8.0 support (closes: #977687) - dark mode for Elastic skin - collected recipients and trusted senders - moving recipients between inputs with drag & drop - full unicode support with MySQL database - support of IMAP LITERAL [RFC7888] - support of [RFC2231] encoded names - cache refactoring * Ship upstream's bin/updatedb.sh to roundcube-core. * d/t/dbconfig-no-thanks: Also run bin/updatedb.sh. * d/t/dbconfig-no-thanks: Check DB ownership and permissions. * Exclude spellchecker from build-time and DEP8 tests, as dictionary mismatch makes it too brittle. * d/pkg-php-tools-overrides: Remove useless roundcube/net_sieve builtin. . roundcube (1.5~rc+dfsg.1-3) experimental; urgency=medium . * DEP-8: Add test for dbconfig-no-thanks (set custom $config['db_dsnw']). * Create symlink var/lib/roundcube/SQL pointing to usr/share/roundcube/SQL. This is required for dbconfig-no-thanks deployments (closes: #996613). * Refresh lintian overrides to accommodate lintian v2.109. * Retroactively update d/roundcube-core.NEWS to advertise the 1.4 smtp_* default settings (closes: #994446). . roundcube (1.5~rc+dfsg.1-2) experimental; urgency=medium . * Replace `which` with `command -v` in maint scripts. * Refresh lintian overrides to accommodate lintian v2.107. * Bump Standards-Version to 4.6.0 (no changes needed). * Remove 4 obsolete maintscript entries in 2 files. * Set upstream metadata fields: Security-Contact. . roundcube (1.5~rc+dfsg.1-1) experimental; urgency=medium . * New upstream release candidate 1.5 (closes: #949629). * d/rules: Exclude tinymce/js/tinymce/tinymce.d.ts in accordance with jsdeps.json. . roundcube (1.5~beta+dfsg.1-4) experimental; urgency=medium . * d/roundcube-core.cron.daily, d/addsqlupdate.sh: `set -ue` and improve quoting. * d/*: Fix space damage. * bin/update.sh: Hardcode define('INSTALL_PATH', '/var/lib/roundcube/'); (closes: #989140). * d/roundcube-core.postinst: Set DEBIAN_PKG=[0|1] for symmetry. * d/p/debianize-config.patch: Comment out sample plugins, see #884992. . roundcube (1.5~beta+dfsg.1-3) experimental; urgency=medium . * d/*.post*, d/*.config: Improve style consistency. * d/*.post*: pathfind(): Keep IFS null (instead of setting it to the empty string) if it was null before. * d/roundcube-core.postinst: Set ln(1)'s '-T' to flag protect against undesired semantics should the target be an existing directory. * d/roundcube-core.postinst, d/roundcube-core.config: Replace useless calls to sed. * d/*.pre*, d/*.post*, d/*.config: Fix space damage. * d/roundcube-core.postinst: Make configuration sample parsing and reading roundcube/hosts more robust. * d/roundcube-core.postinst: 3DES key generation: Use a random 18-bytes long string base64 encoded (the key needs to be 24 bytes long). * d/roundcube-core.postinst: lighttpd: Prefer the more efficient fastcgi-php-fpm over fastcgi-php on lighttpd 1.4.55-2 and later. * d/copyright: Add self. * DEP-8: Add basic Apache2 and lighttpd tests. * DEP-8: Add configuration file and log/temp directory ownership and mode checks. * DEP-8: Add an hardened deployment, with a dedicated PHP-FPM pool and dedicated user/group (so the HTTPd can't read sensitive roundcube data). * d/roundcube-core.post*: Reload webserver with deb-systemd-invoke(1) when possible. * d/roundcube-core.postinst: Avoid running bin/update.sh with root privileges, depending on /etc/roundcube/config.inc.php's ownership and mode: if the file is word-readable then issue a warning and run as www-data; otherwise, if the file not root-owned then run as its owner; otherwise, if the file is group readable and is not group owned by root, and the group is used as a primary group for a single user, then use that user. Should all that fail root privileges are preserved and a warning is issued. * d/roundcube-core.postinst: Issue a warning if a .dpkg-new leak is dedected. Checksums-Sha1: f9d15e4ac0bb56e1a55781979d4fe29572558248 3516 roundcube_1.5.0+dfsg.1-1.dsc 5e2c25eb0af846f4754732741a4dc0199afc56b9 219412 roundcube_1.5.0+dfsg.1.orig-tinymce-langs.tar.xz 5dc19da94d84f438ad09e942ac3761bfac244a0a 1858444 roundcube_1.5.0+dfsg.1.orig-tinymce.tar.xz 02fd512c4a004b57af6e1571d61515826c81dbda 3143300 roundcube_1.5.0+dfsg.1.orig.tar.xz 8c9fa0fd8043a88d1d568b045cd50893b06f4b65 100176 roundcube_1.5.0+dfsg.1-1.debian.tar.xz b3e6ba22b8379a73f2b5bc17809b8d927334b4f9 11543 roundcube_1.5.0+dfsg.1-1_amd64.buildinfo Checksums-Sha256: b409fe06170327199c5aebf56472db5231a971a388c94879b4b35dbfbad107b3 3516 roundcube_1.5.0+dfsg.1-1.dsc a0cc361f18c1469a06217e84900adc2292dbc0a3f828035a76c968e9f6da5233 219412 roundcube_1.5.0+dfsg.1.orig-tinymce-langs.tar.xz fe80ecb2082eb8357d3259dfabdc75e45248e577446e533897be0f68afb00b65 1858444 roundcube_1.5.0+dfsg.1.orig-tinymce.tar.xz e0713e9775df857bcfb39f561897939b4470b760c6170e6ecee4d9b1f990302a 3143300 roundcube_1.5.0+dfsg.1.orig.tar.xz 96a3e2552ec1c5748f354f465b9fb8f3a9477d14dd0ad5034210e7f64e489b7e 100176 roundcube_1.5.0+dfsg.1-1.debian.tar.xz d21359bfee5a5d58a28f5346c79be164ab53faa467d9d162d0e6f838e54e9c0a 11543 roundcube_1.5.0+dfsg.1-1_amd64.buildinfo Files: 9288c4ae5a9d6edc0b36a3efc2b6cdbd 3516 web optional roundcube_1.5.0+dfsg.1-1.dsc 655e7dc6aced560b3b710c75c806b5dd 219412 web optional roundcube_1.5.0+dfsg.1.orig-tinymce-langs.tar.xz dd1a2d6c6cf51f49883b5920e4410bca 1858444 web optional roundcube_1.5.0+dfsg.1.orig-tinymce.tar.xz 1c23b89df696b8048ae2f88ef5b2828e 3143300 web optional roundcube_1.5.0+dfsg.1.orig.tar.xz d61d6f24aadcf6d1688e1f8c6d9a7de1 100176 web optional roundcube_1.5.0+dfsg.1-1.debian.tar.xz 2e25fac7b515dab979c2c850168ddf6d 11543 web optional roundcube_1.5.0+dfsg.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmFzvnYACgkQ05pJnDwh pVKPZg//WZsc4+jKOh6i++XTcjkHUBAXHNxj7g+qzXVUUQVER0vknQR1wQIoCQeN 39GcLaHLQzIXzIeoCiAaaOSZwo/Ao4k3E1GCOlqTgmMEZkw93a/QMbcXwqhJucYC qrK5Bab32Muu9qNARwSvV9+AOxQgtZ0eK8HmJUED/7EWDzqa4OmsQqDnAxFy30h2 V5mFGJbszs68JQw8Q6tGXG8quJc87H7Ybw9lDDRwRQiQAKVyKuTgWMwDELyPRpUl jbGPEcdHCmuegraGrrvQDVEnRKMKQmLJl06qy9gU6m20mV3t313KFLQkUmynKfnC lMl1iswiVf9+pkoyPibDfUTDqILvjnUFav78CS7Wgo2jcaysXNR3yARaxSzrGN8d 9J++nmmqtri8MkMMQHLctaauQpNbaSdTm9frO04ovAwWUDpU7WErOJg545Wg4qv5 QLM45+KkifaiTb5fiITHuOnEZ/5lbmtzL7uuyU8G40gxIR35EaM8bWlQvAccfr8e nbmX3Crsv0CFP3rhBIWZ5h4kD7ecv7lxHGgyZOBSht/7krCPnYsai1WlzK4RZEDj Mnk5g4Rf9wQTgucLXFWiJ44JhswB9XFQaYLVOLMyPzqJNUBXR4ksS1czNR+mYL33 XumHSK5IY5M0NAr5prTdpC/ZRBhMWXTud07D4fKcO4gUmMm6Zvk= =ISGW -----END PGP SIGNATURE-----
