Menu

PostfixAdmin 2.3.8 released

2015-10-07
2015-10-08
  • Christian Boltz

    Christian Boltz - 2015-10-07

    I just released PostfixAdmin 2.3.8, a bugfix release for the 2.3 series.

    Changes since the 2.3.7 release:

    • fix query to enable/disable alias in edit-mailbox for PostgreSQL (#311)
    • don't prefill username in users/ login on failed logins - fixes (probably harmless) XSS
    • fix show_gen_status() to properly escape mail addresses in query (#356)
    • fix escaping in create-admin, create-mailbox and fetchmail templates - fixes (harmless) XSS on form validation errors (thanks to Juan Rossi for reporting them!)
    • don't echo the password back to the browser in the fetchmail form
    • allow MariaDB in Debian package dependencies

    Also note that the fedora package now installs into /var/www/html/.

     
    • voytek eymont

      voytek eymont - 2015-10-08

      On 8 October 2015 6:39:50 am AEDT, Christian Boltz christian_boltz@users.sf.net wrote:

      I just released PostfixAdmin 2.3.8, a bugfix release for the 2.3
      series.

      Changes since the 2.3.7 release:

      Christian,
      Thanks for all your work.

      Dumb question:

      I currently have 237 in use, can I just install it in parallel alongside on different url?
      Thanks

      V

      --
      Sent from my Android device with K-9 Mail. Please excuse my brevity.

       
  • Christian Boltz

    Christian Boltz - 2015-10-08

    Yes, that's possible - the database layout didn't change.

    That said, I don't recommend to do that (maybe except for testing before also upgrading the "production" installation) because I see no point in keeping a version with known bugs ;-)

     
    • voytek eymont

      voytek eymont - 2015-10-08

      On 8 October 2015 9:55:42 pm AEDT, Christian Boltz christian_boltz@users.sf.net wrote:

      Yes, that's possible - the database layout didn't change.

      That said, I don't recommend to do that (maybe except for testing
      before also upgrading the "production" installation) because I see no
      point in keeping a version with known bugs ;-)

      Thanks, Christian.

      Actually, it's 2.3.6 I have, not 2.3.7, my error.

      Yep, that's what I've done with past versions, set 'in parallel', then, remove old.

      Sent from my Android device with K-9 Mail. Please excuse my brevity.

       
      • voytek eymont

        voytek eymont - 2015-10-08

        Sorry about the large letters, totally unintentional, not sure even how it was caused,

        V

        Sent from Kaiten Mail. Please excuse my brevity.

         

Log in to post a comment.