SquirrelMail 1.4.6 Released

[Hvu]

Version 1.4.6 - 23 February 2006
--------------------------------
- Security: MagicHTML fix for comments in styles (reported
by Scott Hughes) and parsing of u\rl (reported by
Martijn Brinkers) which allowed for cross site scripting
when using Internet Explorer [CVE-2006-0195].
- Multi-line encoded headers were being deleted (#1394667).
- Security: Prohibit IMAP injection attempts (reported by Vicente
Aguilera) [CVE-2006-0377].
- Handle unsolicited responses inside SORT responses properly.
- Security: Fix possible cross site scripting through the right_main
parameter of webmail.php. This now uses a whitelist of acceptable
values. [CVE-2006-0188]
- Removed invalid STARTTLS check from configtest.php script.
- Added Georgian language support.

[liam]

Will it update automatically using the cPanel update, or?

[Hvu]

Beats me :p Using Directadmin here and i just ran a script.


#!/bin/sh

echo "";
echo "************************************************** ****";
echo "* Squirrelmail upgrade tool for DirectAdmin servers. *";
echo "* *";
echo "* Author: Jon Stacey <admin@saevian.com> *";
echo "* Modified: April 20, 2005 @ 11:00pm MST *";
echo "************************************************** ****";
echo "";

cd /var/www/html

echo -e "Upgrade to what version? [1.4.6]"
read INSTALL_VERSION

if [ "${INSTALL_VERSION}" = "" ]
then
INSTALL_VERSION=1.4.6
fi

echo "Upgrading to Squirrelmail ${INSTALL_VERSION}";

MIRROR1=jaist
MIRROR2=easynews
MIRROR3=optusnet

FILE=squirrelmail-${INSTALL_VERSION}.tar.gz

echo "Try #1";
echo "";
wget http://${MIRROR1}.dl.sourceforge.net/sourceforge/squirrelmail/${FILE}
if [ ! -e ${FILE} ]
then
echo "Try #2\n";
echo "";
wget http://${MIRROR2}.dl.sourceforge.net/sourceforge/squirrelmail/${FILE}
if [ ! -e ${FILE} ]
then
echo "Try #3\n";
echo "";
wget http://${MIRROR3}.dl.sourceforge.net/sourceforge/squirrelmail/${FILE}
if [ ! -e ${FILE} ]
then
echo "Catastrophe! All Mirrors failed.";
echo "Are you sure you entered a valid version number?";
echo "And you aren't having any network issues?";
exit 1;
fi
fi
fi

tar -zxf ${FILE}

echo "";
echo "";
echo -e "WARNING: Old Data may not be compatible with new installation."
echo -e "Configuration from scratch is Recommended"
echo "";
echo -e "Do you still want to copy Data from your old installation to the new one? [y/N]"
read COPY_DATA

if [ "${COPY_DATA}" = "y" ]
then
echo "Copying Data..."

cp /var/www/html/squirrelmail/data/* /var/www/html/squirrelmail-${INSTALL_VERSION}/data

cp /var/www/html/squirrelmail/config/config.php /var/www/html/squirrelmail-${INSTALL_VERSION}/config

cp -Rp /var/www/html/squirrelmail/plugins/* /var/www/html/squirrelmail-${INSTALL_VERSION}/plugins

cp -R /var/www/html/squirrelmail/themes/* /var/www/html/squirrelmail-${INSTALL_VERSION}/themes/

cp -Rp /var/www/html/squirrelmail/locale/* /var/www/html/squirrelmail-${INSTALL_VERSION}/locale/
else
echo "NOT Copying Data"
fi

OS=`uname`
if [ $OS = "FreeBSD" ];
then
chown -R root:wheel /var/www/html/squirrelmail-${INSTALL_VERSION}
else
chown -R root:root /var/www/html/squirrelmail-${INSTALL_VERSION}
fi

chown -R apache:apache /var/www/html/squirrelmail-${INSTALL_VERSION}/data

rm /var/www/html/squirrelmail

ln -sf /var/www/html/squirrelmail-${INSTALL_VERSION}/ /var/www/html/squirrelmail

rm /var/www/html/${FILE}

echo -e "Would you like to run conf.pl now to (re)configure squirrelmail? Recommended [Y/n]"
read RUN_CONF

if [ "${RUN_CONF}" = "y" ]
then
/var/www/html/squirrelmail-${INSTALL_VERSION}/config/conf.pl
else
HOSTNAME=`hostname`
echo "You may want to check your configuration then by going to: http://${HOSTNAME}/squirrelmail/src/configtest.php"
fi

echo "Squirrelmail has been upgraded. If it is working properly you can delete the older version of squirrelmail from the /var/www/html directory.";

echo "";

exit 0;