Changelog for postfixadmin-2.3.8-4.3.noarch.rpm :

* Sun Oct 11 2015 opensuseAATTcboltz.de- add postfixadmin-changes-since-2.3.8.diff: - enforce $CONF[min_password_length] in create-mailbox
* Wed Oct 07 2015 opensuseAATTcboltz.de- update to PostfixAdmin 2.3.8 changes that were not included in the package yet: - don\'t prefill username in users/ login on failed logins - fixes (probably harmless) XSS - fix show_gen_status() to properly escape mail addresses in query (#356) - fix escaping in create-admin, create-mailbox and fetchmail templates - fixes (harmless) XSS on form validation errors - don\'t echo the password back to the browser in the fetchmail form- remove postfixadmin-changes-since-2.3.7.diff- several fixes for the Fedora and CentOS build: - don\'t scan scripts in the ADDITIONS directory to avoid adding excessive dependencies - use centos_ver instead of centos_version (which isn\'t available in CentOS 7) - change docroot to /var/www/html
* Sun May 18 2014 opensuseAATTcboltz.de- add postfixadmin-changes-since-2.3.7.diff - fix query to enable/disable alias in edit-mailbox for PostgreSQL
* Thu Feb 20 2014 opensuseAATTcboltz.de- update to PostfixAdmin 2.3.7 (bugfix release) changes that were not included in the package yet: - SECURITY: fix SQL injection in show_gen_status() (CVE-2014-2655, bnc#870434) - don\'t trim() mail address to avoid that aliases starting with a space are allowed. This fixes http://sourceforge.net/p/postfixadmin/bugs/210/ and https://sourceforge.net/p/postfixadmin/feature-requests/113/ - update regex in check_domain() to support new, longer TLDs like .international - vacation.pl: encode subject - vacation.pl: disable use of TLS by default due to a bug in Mail::Sender 0.8.22 (you can re-enable it with $smtp_tls_allowed)- remove postfixadmin-2.3-branch.diff
* Sat Sep 28 2013 chrisAATTcomputersalat.de- rework pre section
* if useradd -r then groupadd -r, too
* Thu Sep 12 2013 opensuseAATTcboltz.de- add postfixadmin-2.3-branch.diff with all changes between 2.3.6 release and SVN r1521: - lt.lang, da.lang translation update - when enabling/disabling a mailbox, also update the corresponding alias - fix creating superadmin in setup.php with MariaDB (more strict SQL) - trim() localpart in create-mailbox to avoid mailbox names with leading space - mark vacation_notification.notified field as latin1 to avoid overlong index
* Wed Jan 02 2013 opensuseAATTcboltz.de- update to PostfixAdmin 2.3.6 (bugfix release) changes that were not included in the package yet: - fix double inclusion of config.inc.php in setup.php - fix bool and date handling in fetchmail- remove upstreamed patches
* Fri Nov 30 2012 opensuseAATTcboltz.de- more cross-distributin %if: pwdutils, php_any_db
* Mon Nov 26 2012 Ralf Lang - require php-mbstring as setup.php reports this as a hard dependency
* Thu Jun 28 2012 opensuseAATTcboltz.de- fix footer link (upstream r1402)- focus username field in login form (upstream r1404)- change existing vacation user (< 2012-02-13) to group vacation
* Sun Jun 03 2012 opensuseAATTcboltz.de- add some %if for cross-distribution handling
* Mon Feb 13 2012 opensuseAATTcboltz.de- add vacation user to the vacation group (instead of the default \"users\")
* Thu Feb 09 2012 opensuseAATTcboltz.de- update r1342 patch to fix SLE_10 build failure
* Thu Feb 02 2012 opensuseAATTcboltz.de- add patch to display domain and mailbox description with correct encoding (upstream r1342)
* Thu Jan 26 2012 opensuseAATTcboltz.de- update to PostfixAdmin 2.3.5 (security release) - fixes some SQL injections (CVE-2012-0811) - fixes some XSS vulnerabilities (CVE-2012-0812) - see CHANGELOG.TXT or bnc#741455 for details
* Sun Oct 16 2011 opensuseAATTcboltz.de- include a patch with fixes since the 2.3.4 release (see CHANGELOG.TXT for details)- Add PreReq: pwdutils
* Fri Sep 16 2011 opensuseAATTcboltz.de- 2.3.4 release (bugfix release, see CHANGELOG.TXT for details)
* Sun Aug 28 2011 opensuseAATTcboltz.de- move vacation.pl and ADDITIONS to /usr/lib/postfixadmin/
* Mon Aug 01 2011 opensuseAATTcboltz.de- spec cleanup (manually + spec-cleaner)- create vacation user- move %changelog to .changes
* Tue Mar 15 2011 Christian Boltz - 2.3.3 release bugfix release for 2.3.2 - see CHANGELOG.TXT for details
* Tue Aug 24 2010 Christian Boltz - 2.3.2 release bugfix release for 2.3.1 - see CHANGELOG.TXT for details
* Fri Jul 09 2010 Christian Boltz - 2.3.1 release bugfix release for 2.3 - see CHANGELOG.TXT for details
* Wed Oct 28 2009 Christian Boltz - 2.3 release Most important changes:
* Improved Aliased domains support (no longer relying on catch-all domains) - Note this requires Postfix configuration changes; old configuration(s) will continue to work.
* Security fix for setup.php (password required to access; setup.php can generate this and help you)
* Superadmin can now setup fetchmail for all users
* Enhanced fetchmail.pl script (file locking, syslog logging, configuration file etc)
* Added dovecot quota support (documentation + viewing in Postfixadmin) for dovecot 1.0/1.1 and >= 1.2
* Vacation re-notification after defineable timeout (default remains to notify only once)
* Refactoring of /users (see /model) and XmlRpc interface for remote mail clients (E.g. squirrelmail-postfixadmin)
* Add dovecot password support (see here)
* Added support for courier authlib authentication flavours ($CONF[\'authlib_default_flavor\'])
* update.php should handle all database updates for you
* Lots of small updates and random new minor features
* bug fixes ;-)