33 Commits

Author SHA1 Message Date
Natanael Copa
1d5dbd0127 community/roundcubemail: security upgrade to 1.3.8 (CVE-2018-19206)
fixes #9696
2018-11-29 14:42:08 +00:00
Jakub Jirutka
04b3e2ef1a community/roundcubemail: add date prefix to cron log 2018-07-28 20:33:50 +02:00
Jakub Jirutka
c607297c5f community/roundcubemail: fix logrotate files pattern
Roundcube creates files without .log suffix.
2018-07-28 20:33:21 +02:00
Jakub Jirutka
0bb3e90ee8 community/roundcubemail: add sample nginx config to -doc 2018-07-27 15:30:37 +02:00
Jakub Jirutka
1d6c1025d8 community/roundcubemail: more secure privileges, prefer php-fpm
If the user want to run Roundcube with "traditional", quite insecure
and silly method by running PHP apps with web server (e.g. Apache2
mod_php) under web server's user, (s)he still can, but have to change
group of config files or add web server's user to group roundcube.
This is announced by message in post-upgrade script.

The -openrc subpackage is now installed by default when openrc is
installed, which should promote running Roundcube using php-fpm.
2018-07-27 15:30:37 +02:00
Jakub Jirutka
5fe974d357 community/roundcubemail: add customized default config 2018-07-27 15:30:37 +02:00
Jakub Jirutka
91498e87a2 community/roundcubemail: fix missing JS libs
Oh great, so the roundcube aport has been literally non-functional. >_<
2018-07-27 15:30:37 +02:00
Jakub Jirutka
a556c69c7b community/roundcubemail: disable remote spellcheck by default 2018-07-27 15:30:37 +02:00
Jakub Jirutka
2e608a2da1 community/roundcubemail: move plugins with extra deps to subpkgs
And fix their dependencies.
2018-07-27 15:30:37 +02:00
Jakub Jirutka
d825a8394c community/roundcubemail: copy plugin configs into /etc 2018-07-27 15:30:37 +02:00
Jakub Jirutka
ab4ed513ae community/roundcubemail: add cron script for running daily cleandb 2018-07-27 15:30:37 +02:00
Jakub Jirutka
8cd6917e38 community/roundcubemail: fix scripts in bin/ 2018-07-27 15:30:37 +02:00
Jakub Jirutka
206957b0ed community/roundcubemail: add subpackage for each supported DB 2018-07-27 15:30:37 +02:00
Jakub Jirutka
8036569438 community/roundcubemail: add logrotate config 2018-07-27 15:30:37 +02:00
Jakub Jirutka
cc204055d5 community/roundcubemail: add subpkg -openrc for running with php-fpm 2018-07-27 15:30:37 +02:00
Jakub Jirutka
396a022ea2 community/roundcubemail: generate random session key in post-install 2018-07-27 15:30:37 +02:00
Jakub Jirutka
932c294849 community/roundcubemail: fix fixing of paths, remove ancient mess
- These pre/post upgrade scripts has been added 8 years ago, so they
  are not needed anymore.
- The pre-upgrade script is even not used.
- The sed in prepare breaks config.
2018-07-27 15:30:37 +02:00
Jakub Jirutka
1436d065e4 community/roundcubemail: make -installer depend on origin pkg 2018-07-27 15:30:36 +02:00
Jakub Jirutka
c7b115201f community/roundcubemail: add missing dependencies and remove surplus 2018-07-27 15:30:36 +02:00
Jakub Jirutka
76ca1d47db community/roundcubemail: improve abuild 2018-07-27 15:30:36 +02:00
Leonardo Arena
9be8149c02 community/roundcubemail: security upgrade to 1.3.6 (CVE-2018-9846) 2018-04-12 12:33:59 +00:00
Leonardo Arena
d912ee80e4 community/roundcubemail: adjust config default for tmp and log dirs 2018-01-16 10:46:48 +00:00
Leonardo Arena
ec8ce1596c community/roundcubemail: upgrade to 1.3.4 2018-01-16 10:07:11 +00:00
Jakub Jirutka
63f5e7d295 [various]: unify names of licenses according to SPDX
This commit updates $license variable in all APKBUILDs to comply with
short names specified by SPDX version 3.0 [1] where possible. It was
done using find-and-replace method on substrings inside $license
variables.

Only license names were updated, not "expressions" specifying relation
between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or
exceptions (e.g. "X with exceptions").

Many licenses have a version or multiple variants, e.g. MPL-2.0,
BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not
contain license version or variant. Since there's no way how to infer
this information just from abuild, it were left without the variant
suffix or version, i.e. non SPDX compliant.

GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They
exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later
(formerly e.g. GPL-2.0+). We did not systematically noted distinguish
between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean
GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g.
GPL2+) were left without the variant suffix, i.e. non SPDX compliant.

Note: This commit just fixes format of the license names, no
verification has been done if the specified license information is
actually correct!

[1]: https://spdx.org/licenses/
2017-12-30 21:05:50 +01:00
Leonardo Arena
59fc0fee61 community/roundcubemail: add secinfo 2017-11-09 07:12:55 +00:00
Leonardo Arena
8f20f52228 community/roundcubemail: security upgrade to 1.3.3 (CVE-2017-16651) 2017-11-09 07:04:31 +00:00
Leonardo Arena
057cf91cee community/roundcubemail: upgrade to 1.3.2 2017-11-01 14:02:35 +00:00
Leonardo Arena
dc7cc93161 community/roundcubemail: upgrade to 1.3.1 2017-09-05 09:19:38 +00:00
Leonardo Arena
85f7351904 community/roundcubemail: upgrade to 1.3.0 2017-07-18 09:03:33 +00:00
tmpfile
d1bbf07a53 community/[various]: fix trailing whitespace 2017-07-10 09:04:20 +00:00
Leonardo Arena
def26507e5 community/roundcubemail: security upgrade to 1.2.5 (CVE-2017-8114) 2017-04-28 09:29:18 +00:00
Leonardo Arena
8f6e05874d community/roundcubemail: use php7, disable check() 2017-04-07 12:50:10 +00:00
Jakub Jirutka
4272e802a1 community/*: move php5 and dependent pkgs from main
There two main reasons for this change:

* Active support of PHP 5.x ended on January 2017, security support will
  end on December 2018. Packages in the main repository should be
  supported for at least 2 years, this means until first quarter of 2019
  for the upcoming v3.6.

* php7 and its extensions are currently in the community repository, so
  we can't use single abuild for both php5-* and php7-* packages (as we
  do for Python and Lua packages).

This change was suggested by @vakartel, approved by @ncopa, @kaniini, and
@jirutka.
2017-03-28 18:38:20 +02:00