Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 342003 - www-apps/egroupware-1.8.001 version bump
Summary: www-apps/egroupware-1.8.001 version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Gentoo Web Application Packages Maintainers
URL: http://www.egroupware.org/
Whiteboard:
Keywords: InOverlay
Depends on: 284536
Blocks:
  Show dependency tree
 
Reported: 2010-10-21 11:22 UTC by Peter Meszmer
Modified: 2012-07-02 08:50 UTC (History)
6 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
egroupware-1.8.001_rc1_p20100929.ebuild (egroupware-1.8.001_rc1_p20100929.ebuild,2.53 KB, text/plain)
2010-10-21 11:25 UTC, Peter Meszmer
Details
Ebuild for EGroupware Community Version 1.8 (egroupware-1.8.001.20101201.ebuild,2.59 KB, text/plain)
2010-12-02 09:13 UTC, Peter Meszmer
Details
Ebuild for EGroupware Community Version 1.8 maintenance release 20110214 (egroupware-1.8.001.20110214.ebuild,2.69 KB, text/plain)
2011-02-15 21:46 UTC, Peter Meszmer
Details
Ebuild for EGroupware Community Version 1.8 maintenance release 20110409 (egroupware-1.8.001.20110409.ebuild,2.63 KB, text/plain)
2011-04-16 21:47 UTC, Peter Meszmer
Details
Ebuild for EGroupware Community Version 1.8 maintenance release 20110421 (egroupware-1.8.001.20110421.ebuild,2.63 KB, text/plain)
2011-04-21 19:55 UTC, Peter Meszmer
Details
Ebuild for EGroupware Community Version 1.8 maintenance release 20110805 (egroupware-1.8.001.20110805.ebuild,2.63 KB, text/plain)
2011-08-16 06:51 UTC, Peter Meszmer
Details
Ebuild for EGroupware Community Version 1.8 maintenance release 20111011 (egroupware-1.8.002.20111011.ebuild,2.63 KB, text/plain)
2011-10-16 19:10 UTC, Peter Meszmer
Details
Ebuild for EGroupware Community Version 1.8 maintenance release 20111111 (egroupware-1.8.002.20111111.ebuild,2.63 KB, text/plain)
2011-11-15 12:55 UTC, Peter Meszmer
Details
Ebuild for EGroupware Community Version 1.8 SECURITY and maintenance release 1.8.004.20120405 (egroupware-1.8.004.20120405.ebuild,2.63 KB, text/plain)
2012-04-06 11:53 UTC, Peter Meszmer
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Meszmer 2010-10-21 11:22:51 UTC
Stylite has made a release candidate of EGroupware Community Version 1.8 available. It contains improvements and bugfixes over the 1.6 release.

Attached you'll find an ebuild using the patchset from 2010.09.29.

This ebuild is based on the ebuild from bug #284536 and includes all of its improvements, but I had to change some of the USE flags:

-removed: "jpgraph" as it is now mandatory. (Only the ProjectManager depends on this, but the setup won't continue if not installed)
          "icalsrv" seems to be removed or replaced.
-added:   "phpfreechat" as it is a new module like gallery2.

Some other issues regarding php have been fixed as well. Since the calendar now depends on sqlite,  php has to build with this flag.
Comment 1 Peter Meszmer 2010-10-21 11:25:57 UTC
Created attachment 251437 [details]
egroupware-1.8.001_rc1_p20100929.ebuild

Ebuild for release candidate 1 of EGroupware Community Version 1.8 using patchset 20100929.
Comment 2 Peter Meszmer 2010-12-02 09:11:57 UTC
Stylite has made EGroupware Community Version 1.8 available.

Here an excerpt of the changelog taken from the announcement mail:

- Inclusion of postinstall script from EPL (automatic install/update)
- Full timezone support including recurring events
- Visualisation of participant status of events, mark invitations
- EMail 3PaneView, folder tree in sidebox, import ical/vcard onclick, select all messages in folder
- Infolog: print view and copying of InfoLogs
- Addressbook mergeprint supports now MS- and OpenOffice xml formats
- SiteMgr: support for Joomla! 1.5 templates and new default website 
incl. a sitemgr tutorial
- Many useful extensions and adaptations as well as bug-fixes in all modules

For a full list and for technical details please see the changelog (http://www.egroupware.org/changelog)


I've added the "jpgraph" USE again, as now the setup continues if not installed. (See first post.)
Comment 3 Peter Meszmer 2010-12-02 09:13:45 UTC
Created attachment 256119 [details]
Ebuild for EGroupware Community Version 1.8
Comment 4 Raimund Specht 2010-12-11 14:57:05 UTC
Works me for, except that I had to enable the sqlite3 use-flag for php too
Comment 5 Peter Meszmer 2010-12-12 17:17:01 UTC
Can you please tell me where you noticed the need of the sqlite3 flag for php? 

On my x86 test system I'm running EGW without the sqlite3 flag. Maybe I've overlooked something.

Thanks in advance!
Comment 6 Thomas Raschbacher gentoo-dev 2011-01-20 13:41:48 UTC
added a dep on the 1.6.003 bug to keep track of all this better.
also added this to my lordvan dev-overlay (layman -a lordvan) so that
1) i can test it on several machines easier
2) other ppl can give it a try too (P.S.: i will do proper tests later so don'T try it on live data - or at least make backups!)
Comment 7 Peter Meszmer 2011-02-15 21:44:29 UTC
Stylite has made a maintenance release available.

Here the list of fixes taken from the announcement mail:

- eMail: fix for a problem reported with FreeBSD regarding the generation of random strings for temp-filenames
- Notifications: fix dont try to notify when none is set/forced for folders to check for new mails; dont try to notify when email as module is not enabled for the particular user
- eMail: remove invalid -at- when occurring in full name, when adding address to email; skip addresses that produce a parse error while parsed with imap_rfc822_parse_adrlist
- eMail: fixed error reported with the user-list: Warning on Felamimail, error array_merge in line 1600
- fixed birthday of contacts/accounts in LDAP could not be modified in addressbook
- WiKi: Edit permissions now do imply read permissions
- ImportExport: Replace CRLF with LF so excel does not break lines early (myStylite#974)
- CSV Export: Replace CRLF with LF so excel does not break lines early (myStylite#974)
- ProjectManager config allow non-admin to change working times was not working
- Calendar: invite rights, should NOT implicate a freebusy rights (users with invite rights could see freebusy times of other users)
- JSCalendar: fixed week containing 4th Jan is shown as 52th instead 1st week, if week starts on sunday is selected
- dont give sql error in gathering statistic data, if table does not exists (eg. Gallery is not installed)
- Weeknumbers in calendar views, were wrong for week-start-day other then Monday
- addressbook: check if typefilter is valid (type available), if not remove it
- addressbook: postgres compatibility for distributionlists
- eMail: not filtering own(ed) emailaddresses out of drafts while reopening them for continued processing
- calendar: PANAMA holidays provided by rafael chacon
- eMail: preview now requires user action (click on)
- fixed "undefined function lang_select" issue, if no cookies are allowed, also showing again language selection for new installs
- Calendar: fixed overlapping columns to result in equally wide visible parts for unlimited number of columns
- SambaAdmin: try binded as $accountDN with $_newPassword, in case root DN has no rights to modify anything


In addition: now we need at least one of 

   dev-lang/php[sqlite]
   dev-lang/php[sqlite3]

as it seems to me, that we need SQLite, but the version does not matter.
Comment 8 Peter Meszmer 2011-02-15 21:46:58 UTC
Created attachment 262661 [details]
Ebuild for EGroupware Community Version 1.8 maintenance release 20110214
Comment 9 Peter Meszmer 2011-04-16 21:46:17 UTC
Stylite has made an other maintenance release (2011/04/09) available.

Here the list of fixes taken from the announcement mail:

- updated phpfreechat to version 1.3 to fix php 5.3 depricated warnings
- correctly parsing of "time-range" REPORT filter, giving a SQL error before because it requires comparing as unix timestamp not strings
- Gallery: ignoring ERROR_OBSOLETE_DATA in editAccount hook, as it seems to indecated no error, but nothing changed
- removing memory limit from backup download, by switching off output buffering and zlib output compression
- fixed handling of + char in VFS filenames (using egw_vfs::decodePath() instead of urldecode())
- ImportExport: fixed translation default value not working (eg. "1|>one||2|>two||other")
- CalDAV/Lightning: fixed under some conditions infinit poping up alarms and user not able to add alarms
- Calendar: fixed in some cases not updated alarms, if event got moved 
- LDAP addressbook filter for all addressbooks by "(objectclass=inetorgperson)" to not get eg. computer accounts from Samba
- Calendar: no longer returning private events of other user while searching, as it can reveal private information
- Wiki: fixed and documented wiki makros: PageSize, LinkTable, PageLinks, PageRefs, OrphanedPages, WantedPages and Transclude
- Calendar: fixed SQL error on search: Argument of OR must be of type boolean, not of type smallint
- Calendar: fixed PostgreSQL error on transfering records of a delted user to an other one
- fixed not working scheduled import from vfs
- SiteMgr: allow to import permissions from a previous exported dump (requires identical user and group names to exist)
 wiki: fixed not working xml export using url http://example.org/egroupware/wiki/index.php?page=Pattern&action=xml&lang=en
- updated .htaccess to memory_limit=256M
- fixed not working async service test-job
- exceptions in async jobs no longer stop other jobs, but log the exception to Apache error_log
- Calendar: store async job of alarm with alarm owner as owner to get eg. the correct from address
- ProjectManager: fixed storing a project with unchanged completion=0%, wrongly sets it to "none"
- ProjectManager: fixed not show status bar in project, if no times set for elements
- ProjectManager: fixed ganttchart generated twice (instead reading it from temp. dir)
- ProjectManager: fixed not working switch from real to planned times of projects in ganttchart
- ProjectManager: use calculated start time to calculate end-times, eg. InfoLog DS returned only planned end-times before
- eMail: ask confirmation before deleting a folder in manage folders
- Calendar: fixed not working "hideprivate" filter (shows own private events as private, not NOT showing them)
- updated timezone database to version 1.2011b from current Lightning snapshot
- API: upgrade to purifier Version 4.3.0
- give everyone implicit rights for home app, as taking them away makes to many support problems
- WebDAV download: switching zlib.output_compression off for everything but text files
- CalDAV: improved performance of ctag generation
- Calendar/CalDAV: ctag got not updated when eg. a recurrence got deleted, causing CalDAV calendar to not automatic update
- Setup: fixed not working deinstall of languages
- Calendar/API: fixed not working dateformat d-M-Y with French language (Juin=Jun, Juillet=Jui)
- check quantity of resource to book against maximum, as conflict check only fails if other events are involved
- Calendar: fixed status of all recurrences get set to "unknown", if status of a single recurrence get changed (#2916)
Comment 10 Peter Meszmer 2011-04-16 21:47:22 UTC
Created attachment 270229 [details]
Ebuild for EGroupware Community Version 1.8 maintenance release 20110409
Comment 11 Peter Meszmer 2011-04-21 19:54:51 UTC
As an eastern present: new maintenance release for 1.8.

Again the excerpt of the changelog taken from the announcement mail:

- Addressbook: lettersearch was not working for addressbooks in LDAP if PostgreSQL database was used (bug #2851)
- Calendar: fixed not working "use event TZ" pref for iCal exports and allways use event TZ for calendar notifications (NOT use file export pref.)
- SyncML/Calendar/PostgreSQL: fixed SQL error when searching participants (SELECT DISTINCT requires ORDER-BY-expressions to be in SELECT-list)
- Wiki/PostgreSQL: fixed SQL error when viewing history (#2927), PostgreSQL needs mixed case names quoted
- PostgreSQL: when importing/updating timezones, only query last insert id, if not already in database (gives warning for PostgreSQL)
- Addressbook/PostgreSQL: lettersearch in organisation-view allways returned empty
- Preferences: fixed not working setting of preferences without a logout
- addressbook: enable advanced search for addressbook org view
- eMail: fix for styliteTracker Bug#1471 (adding more than 4 lines of addresses to a mail in compose-dialog shrinks the address-area to a height of 0 with IE9)
- eMail: make sure the quotaDisplay is refreshed on Message List refresh
- Admin: fix for reported error regarding wrong count of lines in Admin -> view error log (note, not all errors are logged there, only some. Its only used for some error logging, most of error logging is done/directed to the webservers error log)
- Addressbook/PostgreSQL: fixed SQL error when checking "use whole query"
- SiteMgr: fixed detection of downloaded content, using Content-Type header now and adding style="white-space: pre-wrap; text-aling: left;" to pre-tag for textfiles
- Preference: fixed PHP Fatal error:  Cannot use string offset as an array on line 550, by importing preference class from trunk
- PostgreSQL/Addressbook: fixed SQL error when listing account, groups or querying birthdays
Comment 12 Peter Meszmer 2011-04-21 19:55:43 UTC
Created attachment 270807 [details]
Ebuild for EGroupware Community Version 1.8 maintenance release 20110421
Comment 13 Sebastian L. 2011-05-10 10:15:11 UTC
Does this not have a maintainer?
What other reason would keep this from getting committed?
Comment 14 Peter Meszmer 2011-08-16 06:48:25 UTC
Please excuse the extreme late reply but your post went simply out of my sight. 

If you want to have a look into www-apps/egroupware changelog, there are several people listed, but ...

As I want to use this groupware, I keep on "writing" this ebuilds until a more competent person takes over the work or I'm getting banned. :) Maybe its useful for somebody else as well.
Comment 15 Peter Meszmer 2011-08-16 06:50:25 UTC
Stylite has made an other maintenance release (2011/08/05) available.
The update packages contain in particular, besides plenty of bug fixes:

1. Fixes regarding security issues like 'local file inclusion', 'sql injection', 'reflected xss' and 'open redirect'.

2. CalDAV/CardDAV redirect for iOS 4.3.1+ regarding automatic account registration

For a full list and for technical details please visit the changelog
http://www.egroupware.org/changelog
Comment 16 Peter Meszmer 2011-08-16 06:51:35 UTC
Created attachment 283519 [details]
Ebuild for EGroupware Community Version 1.8 maintenance release 20110805
Comment 17 Peter Volkov (RETIRED) gentoo-dev 2011-10-02 18:23:31 UTC
(In reply to comment #13)
> Does this not have a maintainer?

Yes, this package has no dedicated maintainer and very few developers in web-app herd at the moment. So if anybody wishes to maintain this package I can proxy commits to the tree. Please step in and attach patch for ebuild and metadata.xml to this bug report.
Comment 18 Peter Meszmer 2011-10-16 19:08:57 UTC
A new maintenance release for 1.8.002 from Stylite, fixing a lot of bugs ...

Again the excerpt of the changelog taken from the announcement mail:

- Calendar: not using freebusy rights for searching calendar, as it would allow to probe for event contents
- tracker: mailhandling, fixing a problem with -> not correctly extracting mailadresses <- when addresses contained UpperCase Letters
- email: fix for missing style color:red in notification messages
- tracker: mailhandling - prevent to use rsh or ssh to establish connection
- API: decodeMailHeader handle nested encoding for imap_mime_header_decode
- API: take care of INNODB and STRICT_TRANS_TABLES for recent mysql installations
- calendar/holidays: fix charset for japanese holidays
- API: taking care of sorting AND filtering by customfields with names containing whitespace; (best way to deal with this issue, is not using whitespace in your customfield names at all)
- sitemanager: fix PostgreSQL error reported on org-tracker (#2956)
- WebDAV: fix for Netdrive to work correct with non-ascii chars like German umlauts
- WebDAV: allow locking of not (yet) existing files to create them
- Tracker: fixed not working file write rights for assignee
 Filemanager: fixed not working rename of file, if path contains a # or ?
- eMail/eMailAdmin: is_a compatibility vs. php5.3.8 resolving to instanceof operator
- Filemanager/WebDAV: understand Windows7 modification time attribute and setting and returning is as vfs modification time
- Addressbook/csv-import: fix/enable update of account - userdata when accounts are stored with ldap. If the condition is on account_id, we supplement the condition with owner=0 (this is needed to correctly determine the storage engine (ldap/sql) for accounts); we strongly recomment NOT to try to use this for adding accounts: use admin import definitions for that task
- eMailAdmin: fix problem with UpperLowerCase User Names, use lower case usernames ONLY, when accessing / creating / updating mailboxes
- SyncML: Fix WBXML encoding issue (community bug#3020 and SyncEvolution issue bug#2975)
- API: is_a compatibility vs. php5.3.8 resolving to instance of operator for most common basic classes
- eMail/Sieve/Vacation: set default to 7 for days setting in vacation for new vacation setups
- CalDAV/GroupDAV: return empty collection, as iCal under iOS 5 had problems with returning "404 Not found" status
- Calendar: added windows timezones to all installations (was added in calendar update 1.7.005, but not to new installs)
Comment 19 Peter Meszmer 2011-10-16 19:10:05 UTC
Created attachment 289979 [details]
Ebuild for EGroupware Community Version 1.8 maintenance release 20111011
Comment 20 Peter Meszmer 2011-10-16 19:11:43 UTC
I would be happy to maintain EGroupware and could provide all the necessary files, up to now I keep them in a private opverlay. 

But this ebuild depends on dev-php/PEAR-XML_Feed_Parser, which is not part of the tree yet.

May I ask which would be the preferable way?
- Moving dev-php/PEAR-XML_Feed_Parser in the tree as well?
- Moving both in an overlay like Sunrise?
- Publishing my own overlay via layman?
- Something else?
Comment 21 Peter Meszmer 2011-11-15 12:54:35 UTC
Stylite released a new maintenance release for 1.8.002, fixing the following bugs:

- SyncML: fix WBXML namespache issue (bug 3048)
- eMail: bug regarding the mimetype of uploaded files; FF701 reports wrong mime type; work around this, by always checking mimetype by suffix
- Calendar/sync: handle error regarding not getting an egw_time object but no exception is thrown; may be php 5.2.x related.
- Filemanager/eTemplate: fix for MyStylite bug #2495: deleting files containing "[" as first char deletes whole directory
- GroupDAV/CalDAV/CardDAV: removed alternative approach from groupdav.htaccess, as it is not suffient for iOS 4.3+ iCal
Comment 22 Peter Meszmer 2011-11-15 12:55:18 UTC
Created attachment 292623 [details]
Ebuild for EGroupware Community Version 1.8 maintenance release 20111111
Comment 23 Maurice van der Pot 2012-03-08 19:05:57 UTC
I think this bug should be upgraded from enhancement to something more important.

This is because egroupware-1.6.001 requires setting the request_order option of PHP to "GPC", which is considered a security issue by the PHP people (https://bugs.php.net/bug.php?id=51210).

And because the default for request_order in the PHP configuration file has been changed to "GP" for PHP 5.3 and up, egroupware will not work out of the box (egroupware will not allow you to log in).
Comment 24 Peter Meszmer 2012-04-06 11:50:30 UTC
Stylite released a new maintenance release. This time it is a SECURITY and bugfix release (1.8.004).

Here an excerpt of the changelog taken from the announcement mail:

This release contains a fix for a XSS (cross-site-scripting) vulnerability, it is recommended to update ASAP!

Thanks to Marcos M Garcia <marcositu-at-gmail.com> for discovering and reporting the problem to us.

The release contains a couple of database schema updates, unlike regular minor version updates. Unfortunately this cant be helped for the intended fixes to work. 

   SO YOU HAVE TO VISIT SETUP AND RUN THE OFFERED UPDATES!

The new version contains 4 major parts:

a) already mentioned fix for a XSS (cross-site-scripting) vulnerability

b) backported security features from Trunk:
- more secure password hashing types: sha512_crypt, sha256_crypt
- enable automatic migration to sha512_crypt, if accounts in SQL or LDAP (but only on Linux, as OpenLDAP has not native support for it)
- session listing without the need of a listable (less secure) session directory

c) numerous CalDAV and CardDAV fixes (EGroupware 1.8.004 is now far more standard compliant then 1.8.002!)
- show calendars and addressbooks selected to sync under user calendar- or addressbook-home-set allowing clients to automatic detect them
- CalDAV scheduling support allows clients eg. to show free busy status of invited participants
- client can choose the url for new events or contacts (standard requirement!)
- allow clients to store attributes (eg. calendar colors) via PROPPATCH
- store unknown attributes (eg. location based alarms) in custom fields
in InfoLog
- CardDAV works now with LDAP backend
- ability to log and display CalDAV/CardDAV traffic without access to commandline of server

--> CalDAV/CardDAV is now recommended over SyncML, which will be no longer supported in the next major release!

d) many bugfixes in all modules since 1.8.002 see

	http://www.egroupware.org/changelog
Comment 25 Peter Meszmer 2012-04-06 11:53:37 UTC
Created attachment 307989 [details]
Ebuild for EGroupware Community Version 1.8 SECURITY and maintenance release 1.8.004.20120405
Comment 26 Thomas Raschbacher gentoo-dev 2012-06-10 15:24:00 UTC
Is anyone in the web-apps herd interested in this still *and* has time?

If you don't have time at the moment please assign this bug to me and I will do the bumps and some testing (since I use egw myself)
Comment 27 Anthony Basile gentoo-dev 2012-06-23 15:19:17 UTC
(In reply to comment #26)
> Is anyone in the web-apps herd interested in this still *and* has time?
> 
> If you don't have time at the moment please assign this bug to me and I will
> do the bumps and some testing (since I use egw myself)

If your willing and able, feel free!
Comment 28 Matti Bickel (RETIRED) gentoo-dev 2012-06-23 15:29:05 UTC
I've done the bump. Thomas, if you can take it from there, be welcome :)
(I've removed mssql and didn't add phpfreechat to ease maintenance burden for starters).
Comment 29 Peter Meszmer 2012-06-23 18:47:32 UTC
Maybe a stupid question, but should I continue to post new ebuilds here or is this now directly done by Thomas Raschbacher via the tree?
Comment 30 Matti Bickel (RETIRED) gentoo-dev 2012-07-02 08:50:43 UTC
Peter, if the ebuild change is trivial (i.e. if copying the ebuild works fine) a bug just pointing out there's a new version available is probably fine.

If there's more work to do, I'm certain everybody appreciates patches :)

I'm closing this as security should take 1.8 to stable in the linked bug.