Nabble - squirrelmail-announce

ANNOUNCE: SquirrelMail 1.4.20 Release Candidate 2 Now Available

2009-08-17T18:00:29Z

Hello,

The SquirrelMail Team is pleased to bring you the second release
candidate ahead of our next SquirrelMail version: 1.4.20-RC2. Hot on
the coattails of 1.4.20 release candidate 1, we received some helpful
feedback from our friends at Secunia Research and have followed up
with another release candidate. The risk of using the 1.4.20 release
candidate 1 package instead of this one is very low, but we encourage
the community to help test code that we hope to release as officially
stable in the near future. Those who can upgrade to release candidate
2 are encouraged to do so!

For more complete details, see the ReleaseNotes and ChangeLog files
included in this release (in the doc/ directory).

This release can be downloaded from the SquirrelMail website:

http://squirrelmail.org/download

Package md5sums
===============
94015fb018cb2165fdfb3c41fd2b8065 squirrelmail-1.4.20-RC2.tar.bz2
03523e8c7ad9d630988d5001c5743b69 squirrelmail-1.4.20-RC2.tar.gz
0fbceec5b9775e72be2b42d197761bc0 squirrelmail-1.4.20-RC2.zip

Package sha1sums
================
f1cdccfdd17d8974adc0b79aba44b62f98f78f64 squirrelmail-1.4.20-RC2.tar.bz2
11e1d8142d371f169bf14deec13659847e81b67b squirrelmail-1.4.20-RC2.tar.gz
f5db20f0bb4fa822c5733fde2e08b7cadb9c67ea squirrelmail-1.4.20-RC2.zip

**** The SquirrelMail team can use your help! ****

Attention all users of SquirrelMail:

SquirrelMail is currently celebrating 10 years of providing free, Open
Source Software to the world. We have a lot to be grateful for and
many people to thank for how successful we've been! But running a
high-profile project with all-volunteer labor means that the mundane
chores gradually consume all our effort and sideline our visionary
initiatives for our next big release. We feel that the time is right,
after so many years of free service, to ask our community to
contribute to the project and support us in keeping up with ongoing
maintenance and development, and in speeding up the release of our
new, fully-skinable "Web 2.0" version. Please visit our donations and
bounties page here:

http://squirrelmail.org/donations.php

Attention developers:

We consist of volunteers developing the most popular open source
webmail client available. We're looking for people to join our team
to help keep our product quality high and to continue to deliver new
and enhanced features. Our project offers an interesting challenge at
the intersection of the IMAP, SMTP and HTTP protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies
* Help sort and fix bugs: interact with submitters, find test cases and
solutions to bugs
* Support our users by answering questions on the mailing lists or the IRC
channel
* Translate SquirrelMail into your language
* Donate to the developers: feed us nuts!

For more details, please refer to http://squirrelmail.org/howtohelp

Happy SquirrelMailing!
The SquirrelMail Project Team

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

[SM-I18N] ANNOUNCE: SquirrelMail 1.4.20 Release Candidate 1 Now Available

2009-08-12T03:47:01Z

Greetings,

The SquirrelMail Team is pleased to bring you the first release
candidate ahead of our next SquirrelMail version: 1.4.20RC1. Because
of the somewhat invasive nature of some of the changes we have
recently made, we are issuing a "release candidate" before we
officially move to version 1.4.20. While we have been very careful to
ensure the stability of SquirrelMail, this version, 1.4.20 release
candidate 1, has undergone limited testing, and we'd like to have more
feedback before we make version 1.4.20 final.

The most notable changes for this version are the addition of two
security mechanisms that fight cross-site request forgeries (CSRF),
the removal of some deprecated PHP functions, some minor fixes in the
filters plugin, and increased user privacy. For more complete
details, see the ReleaseNotes and ChangeLog files included in this
release (in the doc/ directory).

Due to the security issues fixed herein, we'd like to advise all users
of SquirrelMail software to upgrade. However, because this is
technically a "release candidate", it may be most prudent to to test
your upgrade before putting it into production use. We are confident
that most systems will not experience any trouble, but we'll be happy
to work with you to resolve any issues that do arise. Your feedback
is highly appreciated.

This release can be downloaded from the SquirrelMail website:

http://squirrelmail.org/download

Package md5sums
===============
7632177bd3618cd9965e548fd196f737 squirrelmail-1.4.20RC1.tar.bz2
18149da193218202cfb33cc45301761a squirrelmail-1.4.20RC1.tar.gz
e18b6d7c29cff9c7f48eea74b12b78c0 squirrelmail-1.4.20RC1.zip

Package sha1sums
================
30b1645a8bec60c1a932e02a36745e1bc51d0f8a squirrelmail-1.4.20RC1.tar.bz2
f62ca9cf53ab7c4d7d9bcce656206006c2c0b909 squirrelmail-1.4.20RC1.tar.gz
114c571367c44db271646df98db73146e93e12e1 squirrelmail-1.4.20RC1.zip

**** The SquirrelMail team can use your help! ****

Attention all users of SquirrelMail:

SquirrelMail is currently celebrating 10 years of providing free, Open
Source Software to the world. We have a lot to be grateful for and
many people to thank for how successful we've been! But running a
high-profile project with all-volunteer labor means that the mundane
chores gradually consume all our effort and sideline our visionary
initiatives for our next big release. We feel that the time is right,
after so many years of free service, to ask our community to
contribute to the project and support us in keeping up with ongoing
maintenance and development, and in speeding up the release of our
new, fully-skinable "Web 2.0" version. Please visit our donations and
bounties page here:

http://squirrelmail.org/donations.php

Attention developers:

We consist of volunteers developing the most popular open source
webmail client available. We're looking for people to join our team
to help keep our product quality high and to continue to deliver new
and enhanced features. Our project offers an interesting challenge at
the intersection of the IMAP, SMTP and HTTP protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies
* Help sort and fix bugs: interact with submitters, find test cases and
solutions to bugs
* Support our users by answering questions on the mailing lists or the IRC
channel
* Translate SquirrelMail into your language
* Donate to the developers: feed us nuts!

For more details, please refer to http://squirrelmail.org/howtohelp

Happy SquirrelMailing!
The SquirrelMail Project Team

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-i18n mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
Information about translations: http://squirrelmail.org/wiki/LanguageTranslation
Statistics for translations: http://l10n-stats.squirrelmail.org/
List address: squirrelmail-i18n@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.internationalization
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-i18n

SECURITY: SquirrelMail Web Server Status, and Plugins Update

2009-07-30T21:42:28Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

We apologies for the extended downtime for the SquirrelMail plugins
repository, and some of the SquirrelMail site documentation.
Unfortunately due to conflicting time schedules, and some
miss-communications amongst the team (mostly my fault), the server
was unavailable for an extended length of time.

Server Status
- -------------
This evening, after an extended downtime, we finally rolled to using
the new server. XS4All.nl were gracious in loaning us an additional
server whilst we migrated our data, to the new server. All
documentation should now be online again, and active. If you notice
any issues with the site, please feel free to email me directly,
I'll get onto it as soon as I can.

Plugins Compromise
- ------------------
During the initial announcement, we'd mentioned that we did not
believe that any of the plugins had been compromised. Further
investigation has shown that the following plugins were indeed
compromised:

- sasql-3.2.0
- multilogin-2.4-1.2.9
- change_pass-3.0-1.4.0

Parts of these code changes attempts to send mail to an offsite
server containing passwords. We cannot establish a timeline of when
these plugins were compromised. If you are a user of these plugins,
it is strongly recommended you download a fresh copy from the
plugins repository. MD5s for the good versions are below:

a492922e5b0d2245d4e9bc255a7c5755 sasql-3.2.0.tar.gz
b143f2dc82f9e98dd43c632855255075 multilogin-2.4-1.2.9.tar.gz
2cff7c5d4f6f5d8455683bb5d96bb9fe change_pass-3.0-1.4.0.tar.gz

Plugins Availability
- --------------------
As of now, the plugins are available to download again. I
personally apologies for the extended outage of this, as I know some
of you have been eager to get these back up and running again. Once
again, if you notice any issues with the site, feel free to email.

- --
Jon Angliss
<jon@...>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkpydjMACgkQK4PoFPj9H3PXcQCgjKcpMMV4Whra4iRANBkr2Heg
6rcAoJ4CDtSwI9/E1lTtcsxaUf9QS9BK
=qs+a
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

[SM-DEVEL] SECURITY: SquirrelMail Web Server Compromise

2009-06-18T10:50:33Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It was recently discovered that the SquirrelMail webserver had
been compromised. The project administrators took immediate
action to mitigate any futher compromises, locking all accounts
out, and resetting critical passwords.

At this time, the SquirrelMail project administrators have shut
down access to the original server, and put a temporary hold on
access to the plugins. It is believed that none of the plugins
have been compromised, but further investigations are still
being executed.

The compromise of this server does not include a compromise of
the source control, which is hosted on a separate repository
managed by SourceForge.

Further details will be published as soon as the details have
been uncovered.

- --
Jon Angliss
SquirrelMail Team

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32) - GPGshell v3.71

iEYEARECAAYFAko6fXcACgkQK4PoFPj9H3NFWQCgmmU3bLvfH0hN8HGag8VsdJs+
s40AoO5VNVv1HKKDxYVrXDdpzX0778Ii
=h/ct
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

[SM-DEVEL] ANNOUNCE: SquirrelMail 1.4.19 Released

2009-05-21T11:02:33Z

Greetings,

The security fix to map_yp_alias in 1.4.18 turned out to be incomplete. We
also expierenced some regressions in the updated filter plugin. Both are
addressed in this new release 1.4.19 which contains a few other small fixes
aswell.

If you do not use map_yp_alias or the filters plugin there's no urgent need to
upgrade now if you already installed 1.4.18. If you are still on an older
release than 1.4.18 (or use the mentioned functionality) we do urge you to
upgrade as soon as possible as 1.4.18 and 1.4.19 combined fix some important
security issues. Those using the development branch (1.5.x) should install a
recent SVN snapshot.

The latest release can be downloaded from the SquirrelMail website:

http://squirrelmail.org/download

Package md5sums
===============
b7c5ebf0a57fe3511042a740ff1b5710 squirrelmail-1.4.19.tar.bz2
bf71b282361cd9fe65781bb17ecd7704 squirrelmail-1.4.19.tar.gz
30a69a3e37d493bd915e47dc6cda9f9a squirrelmail-1.4.19.zip

Package sha1sums
================
14b66bd470a36750ed4d4a0c8bfc27523639dd5d squirrelmail-1.4.19.tar.bz2
673e5da4018c854ff6e8a7ea24ce754d28ce7fc3 squirrelmail-1.4.19.tar.gz
a041c0fdb8b41455daefe2d31d2bb268210d14c0 squirrelmail-1.4.19.zip

Attention all users of SquirrelMail:

SquirrelMail is currently celebrating 10 years of providing free, Open
Source Software to the world. We have a lot to be grateful for and
many people to thank for how successful we've been! But running a
high-profile project with all-volunteer labor means that the mundane
chores gradually consume all our effort and sideline our visionary
initiatives for our next big release. We feel that the time is right,
after so many years of free service, to ask our community to
contribute to the project and support us in keeping up with ongoing
maintenance and development, and in speeding up the release of our
new, fully-skinable "Web 2.0" version. Please visit our donations and
bounties page here:

http://squirrelmail.org/donations.php

Attention developers:

We consist of volunteers developing the most popular open source
webmail client available. We're looking for people to join our team
to help keep our product quality high and to continue to deliver new
and enhanced features. Our project offers an interesting challenge at
the intersection of the IMAP, SMTP and HTTP protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies
* Help sort and fix bugs: interact with submitters, find test cases and
solutions to bugs
* Support our users by answering questions on the mailing lists or the IRC
channel
* Translate SquirrelMail into your language
* Donate to the developers: feed us nuts!

For more details, please refer to http://squirrelmail.org/howtohelp

Happy SquirrelMailing!
The SquirrelMail Project Team

------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://www.creativitycat.com
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce
------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://www.creativitycat.com
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

signature.asc (500 bytes) Download Attachment

[SM-I18N] ANNOUNCE: SquirrelMail Needs Your Help - Please Donate!

2009-05-18T01:52:27Z

Dear Friends,

SquirrelMail is currently celebrating 10 years of providing free, Open
Source Software to the world. We have a lot to be grateful for and
many people to thank for how successful we've been! SquirrelMail is
included in most major Linux distributions and is independently
downloaded by tens of thousands of people every month, which might
even make it more widespread than some of the biggest free webmail
providers. And, proving that Open Source really works, our popularity
has allowed us to collaborate with countless talented individuals who
have helped us keep SquirrelMail safe, up to date and full of new
features.

But fame has its price. ;-) SquirrelMail has always been run by a
small group of volunteers, and we've never been paid for our efforts.
We do it because this is our passion; we do it for the love and the
fun. But running a high-profile project means that there is a
plethora of work from which no one gets much fun (or love). That's
taken its toll -- our numbers have dwindled and our visionary
initiatives for our next big release have had to take a back seat to
ongoing maintenance, such as responding to bug reports, looking over
plugin and patch submissions, fixing security vulnerabilities,
answering voluminous amounts of email on our mailing lists, and a slew
of other responsibilities. Oh, and then there's paying the bills,
family time, and cleaning the kitchen....

So it's time to ask our community to give back just a little bit. In
the best scenario, SquirrelMail should be able to support one or two
people working full time. To some, this may seem overly ambitious,
but we don't think so. Think of the good money that has been raised
by projects that can be considered far less mission-critical than an
email system. We don't think any other projects are less deserving
than SquirrelMail; only that SquirrelMail is quite worthy of your
support, especially after 10 years of doing it all gratis. With
support on a significant scale, the project will regain momentum, that
"Web 2.0" fully-skinable release will be out in no time, and the
squirrels will feel appreciated!

We'd like to have you show your support by simply donating whatever
you feel you can afford. Currently, you can choose to donate to any
of us individually (if you have stipulations about how the money
should be used/shared, let us know and we will be happy to oblige).
We are also trying out a primitive bounty system, in case you want to
target your money for a specific feature or improvement. If you need
a US tax exemption for your donation, please contact us directly.

As always, we'd like to encourage you to use our official SquirrelMail
support (see http://squirrelmail.org/wiki/OfficialSupport ), and if
you're hiring for work projects you should consider our professional,
dependable team members, since some of them make a living as
consultants.

To donate to SquirrelMail, please visit our new donations and bounties
page here:

http://squirrelmail.org/donations.php

Thanks in advance for your generosity!

For the SquirrelMail Team,

Paul Lesniewski

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables
unlimited royalty-free distribution of the report engine
for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables
unlimited royalty-free distribution of the report engine
for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
-----
squirrelmail-i18n mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
Information about translations: http://squirrelmail.org/wiki/LanguageTranslation
Statistics for translations: http://l10n-stats.squirrelmail.org/
List address: squirrelmail-i18n@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.internationalization
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-i18n

ANNOUNCE: SquirrelMail 1.4.18 Released

2009-05-11T23:48:56Z

Greetings,

The SquirrelMail Team is pleased to announce the release of
SquirrelMail version 1.4.18. The most notable changes for this
version are several security fixes, including a couple XSS exploits, a
session fixation issue, and an obscure but dangerous server-side code
execution hole. However, this version also includes three new
languages and more than a few enhancements to things such as the
filters plugin, the address book system and other things under the
hood. For more complete details, see the ReleaseNotes and ChangeLog
files included in this release (they have moved to the doc/
directory). We advise all users of SquirrelMail software to upgrade.

The latest release can be downloaded from the SquirrelMail website:

http://squirrelmail.org/download

Package md5sums
===============
2df99afc1bc3b121296af65f52fbc5cc squirrelmail-1.4.18.tar.bz2
5e870d2f5b57b4b0e42497cb0a0fae5e squirrelmail-1.4.18.tar.gz
b7b87b73797633c8d92d3da95d7e97c9 squirrelmail-1.4.18.zip

Package sha1sums
================
18872d8ad72f3415672344318901beb9d4d8a860 squirrelmail-1.4.18.tar.bz2
25be33dec86419f07ab8d5b8d41d0e3eed7d2c52 squirrelmail-1.4.18.tar.gz
eb600ab91f78dc6dbbfb029c6521b728f0e624f7 squirrelmail-1.4.18.zip

**** The SquirrelMail team can use your help! ****

Attention all users of SquirrelMail:

SquirrelMail is currently celebrating 10 years of providing free, Open
Source Software to the world. We have a lot to be grateful for and
many people to thank for how successful we've been! But running a
high-profile project with all-volunteer labor means that the mundane
chores gradually consume all our effort and sideline our visionary
initiatives for our next big release. We feel that the time is right,
after so many years of free service, to ask our community to
contribute to the project and support us in keeping up with ongoing
maintenance and development, and in speeding up the release of our
new, fully-skinable "Web 2.0" version. Please visit our donations and
bounties page here:

http://squirrelmail.org/donations.php

Attention developers:

We consist of volunteers developing the most popular open source
webmail client available. We're looking for people to join our team
to help keep our product quality high and to continue to deliver new
and enhanced features. Our project offers an interesting challenge at
the intersection of the IMAP, SMTP and HTTP protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies
* Help sort and fix bugs: interact with submitters, find test cases and
solutions to bugs
* Support our users by answering questions on the mailing lists or the IRC
channel
* Translate SquirrelMail into your language
* Donate to the developers: feed us nuts!

For more details, please refer to http://squirrelmail.org/howtohelp

Happy SquirrelMailing!
The SquirrelMail Project Team

------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

ANNOUNCE: SquirrelMail 1.4.17 Released

2008-12-03T21:53:19Z

Hello All,

The SquirrelMail team is happy to announce the release of version 1.4.17. The
most notable change is a security fix that prevents certain specially-crafted
hyperlinks within messages from executing cross-site scripting attacks. For
other details, see the ReleaseNotes file included in this release. We advise
all users of SquirrelMail software to upgrade.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download

Package md5sums
===============
6ff0df8ae0e7f13418ed37ea1c93f6f3 squirrelmail-1.4.17.tar.bz2
97a492c0cfed90679ce6683d7760d68e squirrelmail-1.4.17.tar.gz
0e22297e91e97a4714263ee718f9ae78 squirrelmail-1.4.17.zip

Package sha1sums
================
da21a447ada4e120b82210e93a737bb4c4509c34 squirrelmail-1.4.17.tar.bz2
ac2ed4ac009405b3ab256b3b6724d7368082bee1 squirrelmail-1.4.17.tar.gz
23702cee04ebb347f5b105b60f11cff7f8dae03f squirrelmail-1.4.17.zip

*** The SquirrelMail team can use your help! ***
We consist of volunteers developing the most popular open source webmail
client available. We're looking for people to join our team to help keep
our product quality high and to continue to deliver new and enhanced features.
Our project offers an interesting challenge at the intersection of the IMAP,
SMTP and HTTP protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies
* Help sort and fix bugs: interact with submitters, find test cases and
solutions to bugs
* Support our users by answering questions on the mailing lists or the IRC
channel
* Translate SquirrelMail into your language
* Donate to the developers: feed us nuts!

For more details, please refer to www.squirrelmail.org/howtohelp

Happy SquirrelMailing!
The SquirrelMail Development Team

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

ANNOUNCE: SquirrelMail 1.4.16 Released

2008-09-28T07:23:44Z

Hello All,

The SquirrelMail team is happy to announce the release 1.4.16. The most
notable change is that cookies are now sent with the secure attribute set for
HTTPS-connections, meaning that they cannot leak to an HTTP-connection on the
same SquirrelMail installation. For details see the included ReleaseNotes. We
advise users that offer their SquirrelMail both over HTTP and HTTPS to
upgrade.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download

Package md5sums
===============
22dcf999941e644edc3ea467ed3b9e24 squirrelmail-1.4.16.tar.bz2
301657fb532a3351ccffbabed4c0ae54 squirrelmail-1.4.16.tar.gz
707a851edb673c28ef96904250cd3a8f squirrelmail-1.4.16.zip

Package sha1sums
================
61c6676c33209addfc2a33d5db26433ed2a3072a squirrelmail-1.4.16.tar.bz2
5e0d76c9409f0c6d7e85d745ab407981a41a018f squirrelmail-1.4.16.tar.gz
021a928021bf1df67f3900dada9e95e3cee6c365 squirrelmail-1.4.16.zip

*** The SquirrelMail team can use your help! ***
We consist of volunteers developing the most popular open source webmail
client available. To keep up with this quality and to prepare it for the
future, we're looking for people to join or team! The project offers an
interesting challenge on the intersection of the IMAP, SMTP and HTTP
protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies;
* Help sort and fix bugs: interact with submitters, find testcases and
solutions to bugs;
* Support our users by answering questions on the mailinglist or IRC channel;
* Translate SquirrelMail into your language.

For more details, please refer to www.squirrelmail.org/howtohelp

Happy SquirrelMailing!
The SquirrelMail development Team

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

ANNOUNCE: SquirrelMail 1.4.15 Released

2008-05-23T10:56:27Z

Hello All,

It's a pleasure to be able to announce the release of SquirrelMail 1.4.15,
which is a bugfix release. It contains an assortment of bugfixes that have
been made during the past months by the SquirrelMail team.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download

*** The SquirrelMail team can use your help! ***
We consist of volunteers developing the most popular open source webmail
client available. To keep up with this quality and to prepare it for the
future, we're looking for people to join or team! The project offers an
interesting challenge on the intersection of the IMAP, SMTP and HTTP
protocols.

What can you do to help? Any of the following:
* Develop new features: help out on making SquirrelMail "skinnable" or work
with new technologies;
* Help sort and fix bugs: interact with submitters, find testcases and
solutions to bugs;
* Support our users by answering questions on the mailinglist or IRC channel;
* Translate SquirrelMail into your language.

For more details, please refer to www.squirrelmail.org/howtohelp

Package md5sums
===============
87b466fef98e770307afffd75fe25589 squirrelmail-1.4.15.tar.gz
22164ce827edafd0afd65763d2a0f096 squirrelmail-1.4.15.tar.bz2
8fca8c24a133313fa3cbeb91217301d8 squirrelmail-1.4.15.zip

Package sha1sums
================
fbccc42433dddfc85842e51e27e25d9f98b84547 squirrelmail-1.4.15.tar.gz
5387e8647ada27d9850c5d2f6a5fdf7dbb6b5862 squirrelmail-1.4.15.tar.bz2
c9b4fd1610abfe76eaa327b133f10df098c7a701 squirrelmail-1.4.15.zip

Happy SquirrelMailing!
The SquirrelMail development Team

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

ANNOUNCE: SquirrelMail 1.4.15 Release Candidate 1 available

2008-05-12T11:39:48Z

Hello All,

It's a pleasure to be able to announce the availability of the first Release
Candidate of SquirrelMail 1.4.15. A release candidate is intended as the
final public verification that a version is all right before it's
declared "stable". Please try it out and report any bugs to us.

The release candidate can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download.php

Package md5sums
===============
eae23ab4bd3bbaa4a0bdbb7ca22f3fab squirrelmail-1.4.15-rc1.tar.bz2
7f747408ea0ed206dae244c592e9d33c squirrelmail-1.4.15-rc1.tar.gz
7e9bca65e3ff677bfa6d8825e6e754b9 squirrelmail-1.4.15-rc1.zip

Happy SquirrelMailing!
The SquirrelMail development Team

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

ANNOUNCE: SquirrelMail 1.4.13 Released

2007-12-14T10:59:08Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

Due to the package compromise of 1.4.11, and 1.4.12, we are forced to
release 1.4.13 to ensure no confusions. While initial review didn't
uncover a need for concern, several proof of concepts show that the
package alterations introduce a high risk security issue, allowing
remote inclusion of files. These changes would allow a remote user the
ability to execute exploit code on a victim machine, without any user
interaction on the victim's server. This could grant the attacker the
ability to deploy further code on the victim's server.

We *STRONGLY* advise all users of 1.4.11, and 1.4.12 upgrade
immediately.

Package MD5s
============
1a1bdad6245aaabcdd23d9402acb388e squirrelmail-1.4.13.tar.bz2
51ddd67a7ff9272f5a6e1da0b9dfbf18 squirrelmail-1.4.13.tar.gz
ed8871a693cc57d5a0d511f7b89f8781 squirrelmail-1.4.13.zip

We apologies for the inconvenience this may have caused.

- --
Happy SquirrelMailing!
The SquirrelMail Development Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFHYtKBK4PoFPj9H3MRAjiUAKDxM5V8J6vLEUAn7dfiIa1HYwKIWQCfYTbA
3nk8LOfqcBHfZ3IvEOXoOCo=
=USb7
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SECURITY: 1.4.12 Package Compromise

2007-12-13T08:49:40Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

It has been brought to our attention that the MD5 sums for the 1.4.12
package were not matching the actual package. We've been
investigating this issue, and uncovered that the package was modified
post release. This was believed to have been caused by a compromised
account from one of our release maintainers.

Further investigations show that the modifications to the code should
have little to no impact at this time. Modifications seemed to be
based around a PHP global variable which we cannot track down. The
changes made will most likely generate an error, rather than a
compromise of a system in the event the code does get executed.

Original packages, stored on secure media, have been restored to the
Sourceforge download servers, and additional signatures for the
packages are now available on the SquirrelMail download page at
http://www.squirrelmail.org/download.php

While we believe the changes made should have little impact, we
strongly recommend everybody that has downloaded the 1.4.12 package
after the 8th December, to redownload the package.

The code modifications did not made it into our source control, just
the final package. We are currently investigating older packages to
see if they were also compromised.

Once again, the original package MD5s are:
ea5e750797628c9f0f247009f8ae0e14 squirrelmail-1.4.12.tar.bz2
d17c1d9f1ee3dde2c1c21a22fc4f9d0e squirrelmail-1.4.12.tar.gz
3f6514939ea1ebf69f6f8c92781886ab squirrelmail-1.4.12.zip

We apologies for the inconvenience this may have caused.

For any further issues, please contact myself, or the security list
security@...

- --
Happy SquirrelMailing!
The SquirrelMail Development Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFHYWKoK4PoFPj9H3MRAjfTAKC0EFUlROK6RLvKy/jdfFjrl3t3hACcDc77
XBPILcvZEu4nNbemwxU8j1I=
=FJzo
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

RELEASE: SquirrelMail 1.4.12

2007-12-04T21:45:25Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello All,

It's my pleasure to announce the release of SquirrelMail 1.4.12. This
release is a bug fix release, including a critical bug in the handling
of attachments.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download.php

Package md5sums
===============
ea5e750797628c9f0f247009f8ae0e14 squirrelmail-1.4.12.tar.bz2
d17c1d9f1ee3dde2c1c21a22fc4f9d0e squirrelmail-1.4.12.tar.gz
3f6514939ea1ebf69f6f8c92781886ab squirrelmail-1.4.12.zip

- --
Happy SquirrelMailing!
The SquirrelMail development team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFHVjr7K4PoFPj9H3MRAu0ZAJwOOSZ7pog6I3ydQXPWod+xiHZA/wCgg4AL
TFxQQ53Vaph8FsLf6LskKMY=
=6DYd
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell. From the desktop to the data center, Linux is going
mainstream. Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

ANNOUNCE: SquirrelMail 1.4.11 Released

2007-09-29T02:24:35Z

Hello All,

It's a pleasure to be able to announce the release of SquirrelMail 1.4.11,
which is a bugfix and stability release. It contains an assortment of
bugfixes that have been made during the past months by the SquirrelMail team,
and improves the handling of strangely-formed mail messages or picky
mailservers.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download.php

Package md5sums
===============
486fb27a6ab306088603163160dbc8ca squirrelmail-1.4.11.tar.bz2
869bece15e1aefe3769269e222bf7e0f squirrelmail-1.4.11.tar.gz
7db9ce40d2995031ec7a5eaa0d32c230 squirrelmail-1.4.11.zip

Happy SquirrelMailing!
The SquirrelMail development Team

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

SquirrelMail 1.4.10 Updated (1.4.10a)

2007-05-10T03:09:07Z

Hello All,

Shortly after the release of SquirrelMail 1.4.10, a regression in the compose
form was discovered. Unfortunately the limited disclosure of security patches
does not allow for public testing, so this regression went unnoticed. We're
sorry for the inconvenience.

If you've already downloaded and installed version 1.4.10, a patch for 1.4.10a
is available here:
http://www.squirrelmail.org/patches/1.4.10-security/1.4.10-1.4.10a.patch
If you've not yet updated to 1.4.10, you can continue straigt on to 1.4.10a.

Package md5sums
===============

d06c473c83e756493ad8ebe94d8d803b squirrelmail-1.4.10a.tar.gz
298aaa1811b3fb40a803a6f57b22be20 squirrelmail-1.4.10a.tar.bz2
feedb1456d03c4e9723e9b32318aa636 squirrelmail-1.4.10a.zip

Download at:

http://www.squirrelmail.org/download.php

Happy SquirrelMailing!

--
Thijs Kinkhorst
SquirrelMail Project Team

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

SquirrelMail 1.4.10 Released

2007-05-09T09:34:12Z

Hello All,

The SquirrelMail Project Team is proud to announce the release of
SquirrelMail 1.4.10. This version is a security release.

This version, 1.4.10 is a maintenance release, addressing
the following problems since 1.4.9a:
- Some security fixes (see below)
- Small enhancements
- A collection of bugfixes and stability enhancements
(see ChangeLog for a full list)

Security issues
===============

This release addresses security issues found since the release of 1.4.9a:

There's an ongoing battle to further secure the HTML filter against malicious
HTML mail and the browsers that accept almost any malformed piece of HTML.

This release contains fixes for the following:
- HTML attachments containing "data:" URLs;
- Internet Explorer in various versions accepts many permutations of HTML
and JavaScript in many charsets. We now properly canonicalize the incoming
HTML to us-ascii before applying further filters. IE only.
- Request forgery through images. It was possible to include "images" in
HTML mails which were in fact GET requests for the compose.php page sending
mail. These images are now properly detected, and the compose form will only
send mail through a POST request.

Thanks to Mikhail Markin, Tomas Kuliavas and Michael Jordon for reporting
(parts of) these issues and working with us to get them resolved.

These are known as CVE-2007-1262. Further details on SquirrelMail
vulnerabilities can be found at the following address:

http://www.squirrelmail.org/security/

Package md5sums
===============

1c40402a805ee316c157f7ae71d653d6 squirrelmail-1.4.10.tar.gz
6e3ab93e8c3854ba84a03df256ed0f7d squirrelmail-1.4.10.tar.bz2
0768994841d87fe07bd04df0edb15bea squirrelmail-1.4.10.zip

Download at:

http://www.squirrelmail.org/download.php

Happy SquirrelMailing!

--
Thijs Kinkhorst
SquirrelMail Project Team

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

attachment0 (492 bytes) Download Attachment

SquirrelMail 1.4.9 translations released

2007-01-06T11:02:27Z

The SquirrelMail Project Team released the new translation packages for
SquirrelMail 1.4.9 and 1.4.9a. You can download packages at the
SquirrelMail site <http://www.squirrelmail.org/download.php>.

Checksums of main packages:

MD5 sums:
eaa0e8835b8d7d451500aad907c22e24 all_locales-1.4.9-20070106.tar.bz2
1bc96d64a6d7904d454540209534c10a all_locales-1.4.9-20070106.tar.gz
c12e2b4615cdcf9e0bf60b00b71f121a all_locales-1.4.9-20070106.zip
b59be8696cbdb05a7684f8a53466e8b8 locales-1.4.9-20070106-src.tar.bz2
b2742f9a0030df68c0918a2ed604cbe8 locales-1.4.9-20070106-src.tar.gz
884775cdfdc01e07c6d590a13d278b2e locales-1.4.9-20070106-src.zip

SHA1 sums:
d187a9b77384b398a0945f51aaaf248379fdfa15 all_locales-1.4.9-20070106.tar.bz2
718fc4bfa9504f169f2e8498e84e1bc1831e50e6 all_locales-1.4.9-20070106.tar.gz
f36c91691a948e742b32e90c821e647f3ab462be all_locales-1.4.9-20070106.zip
3cf37fd93ec81c9a694617dc20781434564d17a7 locales-1.4.9-20070106-src.tar.bz2
8d1b4bfdca2a157e5f424b7ec1cace6f6a33540b locales-1.4.9-20070106-src.tar.gz
817a8f8c6eb3b19e0919ce8130d4b0de50f6fb5f locales-1.4.9-20070106-src.zip

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.9a Released

2006-12-03T17:25:21Z

Hello All,

The SquirrelMail Project Team is proud to announce the release of
SquirrelMail 1.4.9a. This version is a security release.

The day after we released SquirrelMail 1.4.9 new cross site scripting
issues were reported and immediately fixed. Therefor the decision to
release 1.4.9a so short after the 1.4.9 release.

1.4.9 and 1.4.9a is addressing
the following problems since 1.4.8:
- Some security fixes (see below)
- Small enhancements
- A collection of bugfixes (see ChangeLog)

Security issues
===============
This release addresses security issues found since the release of 1.4.8:

Cross site scripting via malicious input the mailto parameter of
webmail.php, the session and delete_draft parameters of compose.php and
via a shortcoming in the magicHTML filter.

This is CVE-2006-6142. Thanks for Martijn Brinkers for his continued research
that uncovered these issues.

We've also changed SquirrelMail attachment handling to work around an issue
in Internet Explorer: the browser will attempt to guess the MIME type of
attachments based on content, not the MIME header we send. Attachments could
fake to be an 'harmless' image/jpeg, while they were in fact HTML that
Internet Explorer would render.

After release 1.4.9 Martijn Brinkers again discovered new cross site
scripting issues in the magicHtml filter. The new discovered security issues
have to do with the wide intepretation of the words expression and url by IE
browsers. As second issue Martijn Brinkers that the @import statement in
stylesheets could be misused.

Further details on SquirrelMail vulnerabilities can be found at the
following address:

http://www.squirrelmail.org/security/

Package md5sums
===============

3adf66bfe2e816ba8375cf811d8ef3f6 squirrelmail-1.4.9a.tar.bz2
5b19f8cc5badef91d1f2410df41564bc squirrelmail-1.4.9a.tar.gz
a9e108418b0a42763a1d29a267fa7168 squirrelmail-1.4.9a.zip

Download at:

http://www.squirrelmail.org/download.php

Happy SquirrelMailing!

--
Marc Groot Koerkamp
SquirrelMail Project Team

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

Re: [SM-DEVEL] SquirrelMail 1.4.9 Released

2006-12-02T14:23:03Z

All,

Minor typo: This release is version 1.4.9 of course, not 1.4.7. It
addresses issues contained in version 1.4.8 and lower. :-)

Happy Squirreling!

Paul Lesniewski
SquirrelMail Project Team

> The SquirrelMail Project Team is proud to announce the release of
> SquirrelMail 1.4.7. This version is a maintenance release, addressing
> the following problems since 1.4.6:
> - Some security fixes (see below)
> - Small enhancements
> - A collection of bugfixes (see ChangeLog)
>
> Security issues
> ===============
>
> This release addresses security issues found since the release of 1.4.8:
>
> Cross site scripting via malicious input the mailto parameter of
> webmail.php, the session and delete_draft parameters of compose.php and
> via a shortcoming in the magicHTML filter.
>
> This is CVE-2006-6142. Thanks for Martijn Brinkers for his continued
> research that uncovered these issues.
>
> We've also changed SquirrelMail attachment handling to work around an
> issue in Internet Explorer: the browser will attempt to guess the MIME
> type of attachments based on content, not the MIME header we send.
> Attachments could fake to be an 'harmless' image/jpeg, while they were
> in fact HTML that Internet Explorer would render.
>
> Further details on SquirrelMail vulnerabilities can be found at the
> following address:
>
> http://www.squirrelmail.org/security/
>
> We strongly encourage any persons uncovering security issues to
> contact the SquirrelMail team via security <at> squirrelmail.org.
>
> Package md5sums
> ===============
>
> b3dc6e3c5accb9b88bf6ebfd87336b96 squirrelmail-1.4.9.tar.bz2
> 5a3ecbda6d8378c68fa40b4ac5b2d487 squirrelmail-1.4.9.tar.gz
> 875848f25d481b59552d4e93aaacba4c squirrelmail-1.4.9.zip
>
>
> Download at:
>
> http://www.squirrelmail.org/download.php
>
> Happy SquirrelMailing!
>
> --
> Thijs Kinkhorst
> SquirrelMail Project Team

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.9 Released

2006-12-02T07:48:45Z

Hello All,

The SquirrelMail Project Team is proud to announce the release of
SquirrelMail 1.4.7. This version is a maintenance release, addressing
the following problems since 1.4.6:
- Some security fixes (see below)
- Small enhancements
- A collection of bugfixes (see ChangeLog)

Security issues
===============

This release addresses security issues found since the release of 1.4.8:

Cross site scripting via malicious input the mailto parameter of
webmail.php, the session and delete_draft parameters of compose.php and
via a shortcoming in the magicHTML filter.

This is CVE-2006-6142. Thanks for Martijn Brinkers for his continued
research that uncovered these issues.

We've also changed SquirrelMail attachment handling to work around an
issue in Internet Explorer: the browser will attempt to guess the MIME
type of attachments based on content, not the MIME header we send.
Attachments could fake to be an 'harmless' image/jpeg, while they were
in fact HTML that Internet Explorer would render.

Further details on SquirrelMail vulnerabilities can be found at the
following address:

http://www.squirrelmail.org/security/

We strongly encourage any persons uncovering security issues to
contact the SquirrelMail team via security <at> squirrelmail.org.

Package md5sums
===============

b3dc6e3c5accb9b88bf6ebfd87336b96 squirrelmail-1.4.9.tar.bz2
5a3ecbda6d8378c68fa40b4ac5b2d487 squirrelmail-1.4.9.tar.gz
875848f25d481b59552d4e93aaacba4c squirrelmail-1.4.9.zip

Download at:

http://www.squirrelmail.org/download.php

Happy SquirrelMailing!

--
Thijs Kinkhorst
SquirrelMail Project Team

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

signature.asc (196 bytes) Download Attachment

SquirrelMail 1.4.8 translation updates released

2006-09-03T12:14:42Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released new translation packages for
SquirrelMail 1.4.8 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Checksums of main packages

MD5 sums:
f8a042fd6b3ea68a3da49c3398224205 all_locales-1.4.8-20060903.tar.bz2
9663541d129cc00e57fac7a92378122b all_locales-1.4.8-20060903.tar.gz
aea1c0a6211da5469286abc37b62a044 all_locales-1.4.8-20060903.zip
9874e86a4e2144b25d351267a8de52fd locales-1.4.8-20060903-src.tar.bz2
e185991a28949e57faee45035ecc1b38 locales-1.4.8-20060903-src.tar.gz
7cb23b64aa2bed299c1055693f517bd6 locales-1.4.8-20060903-src.zip

SHA1 sums:
dcfe8084c99033e12da7b813cb83fd757af7b0b6
all_locales-1.4.8-20060903.tar.bz2
5d1df8a6cefe1700b5e4c955ea93df424d11830f
all_locales-1.4.8-20060903.tar.gz
b698a826a7d7a62a8545b07bfd204476fc6bf5fc
all_locales-1.4.8-20060903.zip
7d40e00d72a72b1b39110672e25a66c5e59040cf
locales-1.4.8-20060903-src.tar.bz2
2660d6bb9d346c47fa082806ba34594b02b8a572
locales-1.4.8-20060903-src.tar.gz
ed9520dedf7cf271c54de4a3cd5f625a1a490d4c
locales-1.4.8-20060903-src.zip

- --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFE+xuRaYoxl8XwnvYRAsOhAKCWHwhwxm85cgwtd4/tCI3nu/iGDwCgweZn
ad511ltHHlx1zojrcugqRuY=
=HYJS
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.8 released - fixes variable overwriting attack

2006-08-11T06:26:09Z

Hello all,

Today SquirrelMail version 1.4.8 has been released with a collection of
bugfixes and an important security fix. It was possible for an
authenticated user to overwrite random variables in the compose.php
script. This may open up possible attack vectors like reading or
overwriting a user's preference file or attachments.

We advise all current SquirrelMail users to upgrade. There's also a
patch available against 1.4.7. The interesting thing is that the
function that contained the flaw was actually broken. The function is
used to resume a compose session of a user that is confronted with a
session timeout after composing a long mail. We've got two patches
available: a minimal one which just removes the code, since it was
broken anyway, and a full version that repairs the functionality and
closes the hole.

SquirrelMail can be downloaded here:
http://www.squirrelmail.org/download.php
The patches can be found here:
http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-minimal.patch
http://www.squirrelmail.org/patches/sqm1.4.7-expired-post-fix-full.patch
They also apply against the current development version.

We'd like to thank James Bercegay of GulfTech Security Research for
finding this issue and reporting it to us.

Happy SquirrelMailing!

Thijs Kinkhorst
on behalf of the SquirrelMail team

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

signature.asc (196 bytes) Download Attachment

SquirrelMail 1.4.7 Released

2006-07-04T14:11:35Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello All,

The SquirrelMail Project Team is proud to announce the release of
SquirrelMail 1.4.7. This version is a maintenance release, addressing
the following problems since 1.4.6:
- - Minor security fixes (see below)
- - A lot of bugfixes (see ChangeLog)
- - Added support for Ukrainian

Security issues
===============

This release addresses two different security issues found since the
release of 1.4.6, which we consider to be of minor severity, but they
have of course been fixed:

- - It was possible to include a local file through functions/plugin.php
with register_globals enabled, and magic_quotes disabled. However,
running with register_globals enabled is completely unnecessary and a
well-known security hazard. We've now changed the code such that when
register_globals is enabled, all globals are deregistered. Reported by
Denix Solutions, thanks!

- - It was possible to steal a cookie of a user that ran on the same base
domain. Since this setup is already inherently insecure we don't think
the impact is big, but the code was of course fixed to also incorporate
the path to SquirrelMail.

Further details on SquirrelMail vulnerabilities can be found at the
following address:

http://www.squirrelmail.org/security/

We strongly encourage any persons uncovering security issues to
contact the SquirrelMail team via security <at> squirrelmail.org.

Package md5sums
===============

08301f14d71e4452e93f21b5e6747a4a squirrelmail-1.4.7.tar.bz2
f53c91d7799cd8fd9d0550f2cc7a8815 squirrelmail-1.4.7.tar.gz
32688d817c6dc537ea8d3b9e84f47d4c squirrelmail-1.4.7.zip

4b78f4612ef0a68e5a81a818a113497c all_locales-1.4.7-20060702.tar.bz2
d89415a37ebb83e5910a8f7b3219a0be all_locales-1.4.7-20060702.tar.gz
18cb3083488f26cd7e99daf16a497fc1 all_locales-1.4.7-20060702.zip

- --
Tomas Kuliavas
The SquirrelMail Project Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEqst2aYoxl8XwnvYRAj02AJ0YiYIzdrh9VQTh7FdP76VEgUjO3QCfVwaL
wy4ixnh6UorXuNwpQLZisgE=
=VA8Q
-----END PGP SIGNATURE-----

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.6 translation updates released

2006-04-10T11:48:53Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released new translation packages for
SquirrelMail 1.4.6 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Information about main updates:
* added Ukrainian translation by Serhij Dubyk
* fixed some Japanese and French translation strings
* updated Geogian and Norwegian Nynorsk translations
* updated some plugin translations

Ukrainian translation needs some modification in stock SquirrelMail
1.4.6 functions/i18n.php file. Modified file and patch are included in
package.

Checksums of main packages

MD5 sums:
* 24528f477061400d2b457be2ee819c69
all_locales-1.4.6-20060409.tar.bz2

* 70508bf22c320103beef344591e28973
all_locales-1.4.6-20060409.tar.gz

* 8cf2b7209c4c5be75418addf23440114
all_locales-1.4.6-20060409.zip

* 59bf0e99dd0e57d0329e9eacb679a83c
locales-1.4.6-20060409-src.tar.bz2

* ddd0e3245683ba44211d9ea49681cba1
locales-1.4.6-20060409-src.tar.gz

* f406db532ecc6a09155580da9beebf39
locales-1.4.6-20060409-src.zip

SHA1 sums:
* 4a6b748d4558c516a0c65b6889ce4ab32876a7eb
all_locales-1.4.6-20060409.tar.bz2

* 5f369e0ac3e02f265854363281ec341e4dd1a356
all_locales-1.4.6-20060409.tar.gz

* 8c6989b7f0059f44c6959f70ab6e913b7c1d7f29
all_locales-1.4.6-20060409.zip

* 086c206cc0d6793c966a426d6daea8d4a2e23bbe
locales-1.4.6-20060409-src.tar.bz2

* 2434dcd5ca2cffc4c82c5c121f58f10386116320
locales-1.4.6-20060409-src.tar.gz

* 8bf924a86b852cbba94dc01aaa2cebd6168d1a0a
locales-1.4.6-20060409-src.zip

- --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEOpqEaYoxl8XwnvYRAm7sAKCyXhoI83Z42ljbh/i6e4IOJn+ykQCfTBX7
z/uhtWCNVlrlVoayTonXQ3I=
=Yigg
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.5.1 translation updates released

2006-04-10T11:25:29Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released new translation packages for
SquirrelMail 1.5.1 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Checksums of main packages

MD5 sums:
* 739e6e1f29a8e3177b083c1971bbe358
all_locales-1.5.1-20060409.tar.bz2

* 32946a396a96c3e2c6619d07f66c2743
all_locales-1.5.1-20060409.tar.gz

* c5ec37cb53047582d6cbcf181a758195
all_locales-1.5.1-20060409.zip

* 3265012a6f8746d5a1949fbb3ec4a87a
locales-1.5.1-20060409-src.tar.bz2

* a1ebe91fa403dc2451c0ee8d9d9408e6
locales-1.5.1-20060409-src.tar.gz

* f05e444c769825831c75048d62669b74
locales-1.5.1-20060409-src.zip

SHA1 sums:
* 74c5321f5269f980e7e7adb33b376a0637798e9f
all_locales-1.5.1-20060409.tar.bz2

* 150aed5c7b27009c6a0073a44cb6fa0a9fcf3561
all_locales-1.5.1-20060409.tar.gz

* cb2b972ade07abd78c8ad4bb22b45135c803ac04
all_locales-1.5.1-20060409.zip

* a1a7c8d348e5c67c1e9b3688d8d2f36fc8167bcf
locales-1.5.1-20060409-src.tar.bz2

* 00b19f6189aab6e68af54013fa88388b40a754a6
locales-1.5.1-20060409-src.tar.gz

* cbf77ba11d89ba647d8f3ce732f875199ce797e6
locales-1.5.1-20060409-src.zip

- --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEOpUJaYoxl8XwnvYRAu+eAKCdLuR7PnFSCTfawiAAs3CNS73NZwCgupHf
Tv8/SElWxOUUay8Jlmiysfs=
=qINo
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.6 translations released

2006-02-24T10:48:39Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released translation packages for
SquirrelMail 1.4.6 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Checksums of main packages

MD5 sums:
* 29dfec2e0f71fba368a89c36c51881c2
all_locales-1.4.6-20060221.tar.bz2

* d80e36431440eafdbc3142dd71811b5a
all_locales-1.4.6-20060221.tar.gz

* 5f934b7cdee22042bc2fef6178ec5135
all_locales-1.4.6-20060221.zip

* 55964cd68f93dd2fe0eba19e1d2b6b0b
locales-1.4.6-20060221-src.tar.bz2

* 0dfa7bc01e77d5eec9aba176b1465025
locales-1.4.6-20060221-src.tar.gz

* eb3e17ac4f1141b3fd04a108c7a21e6e
locales-1.4.6-20060221-src.zip

SHA1 sums:
* 110dbcd216005138fd8415b569b5b93fb929977e
all_locales-1.4.6-20060221.tar.bz2

* 5c53ed7fc3b3a8ae0521e48ad70455eb500d0ae9
all_locales-1.4.6-20060221.tar.gz

* 74e79ef72b3e9f8fcdadccf1cfb0802d4c485c5a
all_locales-1.4.6-20060221.zip

* b6a0c19834a54de2e42428207ddb258b5e1fcfa4
locales-1.4.6-20060221-src.tar.bz2

* c68aa1612d730077889379b5f35b1e7e5d3b40ab
locales-1.4.6-20060221-src.tar.gz

* 27105602db65cc289aafdfa475053d2b78c7e2ad
locales-1.4.6-20060221-src.zip

- --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFD/1UGaYoxl8XwnvYRAvm8AKCJ3OiAcF1BR4zB2gpUUHBWKEttYQCbB2lu
6wYDlK3wftewrxAMEYuenbk=
=LvX5
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.6 Released

2006-02-23T14:01:59Z

Hello All,

It is my proud pleasure to announce the final release of SquirrelMail
1.4.6.

This release is very important, and we strongly advise everybody to
update to the latest release.

Security Update
===============
This version contains a number of security updates that were brought
to our attention via a number of sources.

- In webmail.php, the right_frame parameter was not properly sanitized
to deal with very lenient browsers, which allowed for cross site
scripting or frame replacing. [CVE-2006-0188]

- In the MagicHTML function, some very obscure constructs were
discovered to be exploitable: 'u\rl' was interpreted as 'url' (privacy
concern), and comments could be inside keywords (allows for cross site
scripting). Both only affect Internet Explorer users. Found by Martijn
Brinkers and Scott Hughes. [CVE-2006-0195]

- The function sqimap_mailbox_select did not strip newlines from the
mailbox parameter, and thereby allowed for IMAP command injection.
Found by Vicente Aguilera. [CVE-2006-0377]

Further details on SquirrelMail vulnerabilities can be found at the
following address:

http://www.squirrelmail.org/security/

We strongly encourage any persons uncovering Security issues to
contact the SquirrelMail team via security@....

In This Release
===============
This release contains mostly bug fixes, including corrections for PHP
behaviour changes in file handling, and some data types. Especially
running SquirrelMail on the most recent PHP versions should be much
improved.

For further information about the changes involved in this release,
please see the ChangeLog and ReleaseNotes files included with the
release.

The latest release can be downloaded from the SquirrelMail website at
http://www.squirrelmail.org/download.php

Happy SquirrelMailing
The SquirrelMail development Team

signature.asc (196 bytes) Download Attachment

SquirrelMail 1.5.1 translations released

2006-02-19T07:00:21Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

The SquirrelMail Project Team released translation packages for
SquirrelMail 1.5.1 version. You can find packages on SquirrelMail site
(http://www.squirrelmail.org/download.php).

Checksums of main packages

MD5 sums:
* ea311416ba9a96352a0728f5a7611102
all_locales-1.5.1-20060219.tar.bz2

* 10d7e98bfacb3f000e7402ea8e19368e
all_locales-1.5.1-20060219.tar.gz

* e2860bb07371764e8696ca46694eecc1
all_locales-1.5.1-20060219.zip

* 1e20ae4b083decc33057dab44676dc87
locales-1.5.1-20060219-src.tar.bz2

* 9d456578819212263185c77997023e82
locales-1.5.1-20060219-src.tar.gz

* 7ab7255ba2074e32a337723e6f951d63
locales-1.5.1-20060219-src.zip

SHA1 sums:
* 77d2f0f4328ff546076181fa5c54b64ce8994888
all_locales-1.5.1-20060219.tar.bz2

* 0bd8fa9db4712235d358640d1b5999b4db67bb77
all_locales-1.5.1-20060219.tar.gz

* 0f5f3b077bbd729aa3733d67bf2ed107b9eb0a8f
all_locales-1.5.1-20060219.zip

* 268cedbda5cce88521b354babd70aaa079455518
locales-1.5.1-20060219-src.tar.bz2

* 90317abccc3a44ae493cbed35d11855a09dd701e
locales-1.5.1-20060219-src.tar.gz

* f6d62a78afef392be00d4de96329e10e065cd660
locales-1.5.1-20060219-src.zip

- - --
Tomas Kuliavas
The SquirrelMail Internationalization Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFD+IgFaYoxl8XwnvYRAgY5AJ9PINdBAD1UvMS35CwK0SUa+a0W4QCeOkKO
viriavY8gN9HgvK0m9LGuPw=
=+0AE
-----END PGP SIGNATURE-----

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

ANNOUNCE: SquirrelMail 1.5.1 Released

2006-02-19T05:26:12Z

Hello List,

The SquirrelMail Team is proud to announce the release of SquirrelMail
1.5.1! This is the second release of the development 1.5.x series. This
release contains many updates like improved performance, PHP5 support,
interface tweaks and preliminary template support.

For more info see the release notes
(http://sourceforge.net/project/shownotes.php?group_id=311&release_id=394739).
To grab your copy, go to http://www.squirrelmail.org/download.php.

Regards,

Marc Groot Koerkamp
Squirrelmail Development Leader.

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
--
squirrelmail-announce mailing list
List Address: squirrelmail-announce@...
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-announce

SquirrelMail 1.4.6rc1 translation package released

2005-12-12T19:37:26Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SquirrelMail Internationalization Team released translation package for
SquirrelMail 1.4.6rc1 version.

This version contains updates in Dutch, Estonian and Faroese translations
and plugin string updates. Special thanks to Tanel Kindsigo for Estonian
translation updates. Other pending translation updates should be available
in newer 1.4.6 translation packages.

Main package md5sums:
* all_locales-1.4.6rc1-20051212.tar.bz2
016f41abaee2c1a9d9f4b3c0bd8efbea
* all_locales-1.4.6rc1-20051212.tar.gz
a4cea13ede50a1ed1de23f75c73bdf66
* all_locales-1.4.6rc1-20051212.zip
11e960843f11616e328d532a780d266a

Main package sha1sums:
* all_locales-1.4.6rc1-20051212.tar.bz2
9cbbdc38b3cd391fc5e21e704e0199cf90d8d906
* all_locales-1.4.6rc1-20051212.tar.gz
9ea569368a5887b5618fe426c5cd5335de9e57ba
* all_locales-1.4.6rc1-20051212.zip
646c0479afefc4e31d606f9800f4f04b3a51dd25

Other packages can be found on SquirrelMail SourceForge file repository.
http://sourceforge.net/project/showfiles.php?group_id=311&package_id=110388&release_id=377647

Md5sums and sha1sums are attached to this email. They can also be found on
http://www.squirrelmail.org/sums/all_locales-1.4.6rc1-20051212.md5
http://www.squirrelmail.org/sums/all_locales-1.4.6rc1-20051212.sha1

- --
SquirrelMail Development Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)

iD8DBQFDnkH6K4PoFPj9H3MRAsXKAKDKMu+MuXuZkmkgOL0MfP+6NaD21QCeLKzY
9MgOPI5zCj2ysmOg7OuTPTs=
=WIED
-----END PGP SIGNATURE-----

all_locales-1.4.6rc1-20051212.sha1 (12K) Download Attachment
all_locales-1.4.6rc1-20051212.md5 (11K) Download Attachment

[SM-DEVEL] ANNOUNCE: SquirrelMail 1.4.6 Release Candidate 1 available

2005-12-10T13:44:01Z

The SquirrelMail team is happy to announce that a testing version has
been released for the stable series: 1.4.6 Release Candidate 1. This
release candidate addresses many bugs found since the release of our
previous version.

Details on all the changes in this release can be found in the
ChangeLog: http://www.squirrelmail.org/changelog.pgp
To grab your copy, go to the Download page at:
http://www.squirrelmail.org/download.php

A package for Debian will be available shortly in Debian's
'experimental' distribution.

Please let us know how this RC works for you, so we can fix any problems
in time for 1.4.6-release. You can use our bugtracker at
http://www.squirrelmail.org/bugs , IRC #squirrelmail at
irc.freenode.org, or post to our development mailinglist at
squirrelmail-devel@....

Happy SquirrelMailing!

The SquirrelMail development team

signature.asc (196 bytes) Download Attachment

[SM-DEVEL] SquirrelMail Extra decoding library released

2005-11-08T20:14:50Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The SquirrelMail Project Team released Extra decoding library.

This is the first stable extra decoding library package release.

SquirrelMail decoding functions are used to display and convert messages
encoded in different character sets. Extra decoding library provides support
of some complex Eastern character sets and some rarely used Apple character
sets. Current release supports Big5, Windows-874 (cp874, Thai), Windows-949
(UHC, Korean), EUC-CN, EUC-JP, EUC-KR, EUC-TW, GB18030, GB2312, ISO-2022-CN,
ISO-2022-JP, ISO-2022-JP-2, ISO-2022-KR, Shift_JIS and various x-mac-*
character sets.

Extra decoding library can be used in SquirrelMail 1.4.4 or newer. It
depends on sq_is8bit() function. In order to optimize decoding of Eastern
character sets, PHP installation needs recode (http://www.php.net/recode)
or iconv (http://www.php.net/iconv) support. Some decoding functions can
use mbstring functions present in php 4.3.0. Mbstring decoding needs
sq_mb_list_encodings() function from SquirrelMail 1.5.1 or 1.4.6.

Some decoding code that be activated only when $aggressive_decoding variable
is set to true. This variable should be enabled only on smaller systems,
that don't call aggressive decoding functions very often. Turning on
$aggressive_decoding variable by default in packaged SquirrelMail versions
is not recommended.

If you find bugs in this library, report them in SquirrelMail bug tracker
(http://www.squirrelmail.org/bugs). Developers will need information about
PHP version, PHP recode, iconv and mbstring extensions, used SquirrelMail
version, any modification made in functions/i18n.php and mbstring
extension settings.

You can find packages on the Download page.

Package md5sums:
4793c94361d448831f28dcaab7ce5ad2 squirrelmail-decode-1.0.tar.bz2
2474774d0fee733d518b64f881a0f587 squirrelmail-decode-1.0.tar.gz
3396e9734f8de2b5dd0e96d3ce4e72ec squirrelmail-decode-1.0.zip

Package sha1sums:
5a8942d9b058feaa756d3d04bb47719acc1201c6 squirrelmail-decode-1.0.tar.bz2
93afe60bbbf1a050d3e1b7bbcbeaa38447439669 squirrelmail-decode-1.0.tar.gz
c47aa5ae421b0208bb3fb42021b3eddf9760f1af squirrelmail-decode-1.0.zip

- --
The SquirrelMail Project Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkNxd7kACgkQK4PoFPj9H3PRMQCg7e3wt0eRwNDc52LzgPomVhTn
erEAoK1csAYa3AM1TFP7RVjr7ire9lGp
=dYUB
-----END PGP SIGNATURE-----

-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
--
squirrelmail-devel mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-devel@...
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.devel
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_idq39
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel