summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTim Harder <radhermit@gentoo.org>2010-10-11 00:55:50 +0000
committerTim Harder <radhermit@gentoo.org>2010-10-11 00:55:50 +0000
commita85d54ab949934ac1313debb0136130982cbe04e (patch)
tree5b5512e76217bf876717d9deccac1e783fd07843 /mail-client/roundcube/files
parent2.2_rc92 version bump. This fixes a regression since 2.2_rc90 which can (diff)
downloadgentoo-2-a85d54ab949934ac1313debb0136130982cbe04e.tar.gz
gentoo-2-a85d54ab949934ac1313debb0136130982cbe04e.tar.bz2
gentoo-2-a85d54ab949934ac1313debb0136130982cbe04e.zip
Remove old versions with security issues (bug #308065).
(Portage version: 2.2_rc90/cvs/Linux x86_64)
Diffstat (limited to 'mail-client/roundcube/files')
-rw-r--r--mail-client/roundcube/files/roundcube-0.3.1-disable-dns-prefetching.patch40
1 files changed, 0 insertions, 40 deletions
diff --git a/mail-client/roundcube/files/roundcube-0.3.1-disable-dns-prefetching.patch b/mail-client/roundcube/files/roundcube-0.3.1-disable-dns-prefetching.patch
deleted file mode 100644
index 0ec3c77b706e..000000000000
--- a/mail-client/roundcube/files/roundcube-0.3.1-disable-dns-prefetching.patch
+++ /dev/null
@@ -1,40 +0,0 @@
---- roundcubemail-0.3.1.orig/CHANGELOG 2009-10-31 08:20:02.000000000 -0500
-+++ roundcubemail-0.3.1/CHANGELOG 2010-09-27 23:58:39.540056153 -0500
-@@ -1,6 +1,7 @@
- CHANGELOG RoundCube Webmail
- ===========================
-
-+- Fix CVE-2010-0464: Disable DNS prefetching (#1486449)
- - Specify toolbar container in compose template (#1486247)
- - Fix $_SERVER['HTTPS'] check for SSL forcing on IIS (#1486243)
- - Avoid unnecessary page loads for selected tab (#1486032)
---- roundcubemail-0.3.1.orig/program/include/rcube_shared.inc 2009-10-27 04:43:39.000000000 -0500
-+++ roundcubemail-0.3.1/program/include/rcube_shared.inc 2010-09-27 23:58:39.541053001 -0500
-@@ -39,6 +39,8 @@
- header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
- header("Cache-Control: private, must-revalidate, post-check=0, pre-check=0");
- header("Pragma: no-cache");
-+ // Request browser to disable DNS prefetching (CVE-2010-0464)
-+ header("X-DNS-Prefetch-Control: off");
-
- // We need to set the following headers to make downloads work using IE in HTTPS mode.
- if (rcube_https_check()) {
---- roundcubemail-0.3.1.orig/program/steps/mail/get.inc 2009-09-22 02:50:32.000000000 -0500
-+++ roundcubemail-0.3.1/program/steps/mail/get.inc 2010-09-28 00:00:16.001053823 -0500
-@@ -41,6 +41,7 @@
- $MESSAGE = new rcube_message(get_input_value('_uid', RCUBE_INPUT_GET));
- }
-
-+send_nocacheing_headers();
-
- // show part page
- if (!empty($_GET['_frame'])) {
-@@ -66,8 +67,6 @@
-
- $browser = new rcube_browser;
-
-- send_nocacheing_headers();
--
- // send download headers
- if ($_GET['_download']) {
- header("Content-Type: application/octet-stream");