Download SquirrelMail 1.4.4 – RC1

In the stable branch of Squirrelmail, the 1.4 series, a new version appeared at the last minute of last year. This is the first release candidate of version 1.4.4. Squirrelmail is an email client, written entirely in PHP4, and runs in any web browser. It has support for IMAP and SMTP protocols and all screens are built in HTML 4.0, with no JavaScript required. The program has all the functionality that can be expected from a full-fledged e-mail program, such as support for MIME, folders and an address book. This version has a long list of bug fixes, including the XSS patch released with version 1.4.3a. The full changelog looks like this:

Version 1.4.4 – RC1

• Get alternating row colors of addressbook in sync with mailbox list.
• Fix bug in detecting the delimiter in a folder moved to trash.
• Trailing spaces are no longer trimmed from folder names (#818974).
• Give proper error when PEAR DB not found.
• Remove inappropriate strip_tags() from add-to-addressbook (#968475).
• Translations are no longer included by default but instead are packaged separately. See locales/README.locales for details.
• Backport Charset Decoding functions from DEVEL branch. This vastly increases the number of supported character sets and the performance of decoding.
• Add src/configtest.php script which checks for common errors in the config.
• Fixed forward in new window from search page courtesy of Jason Munro.
• Prefs caching didn’t work properly with register_globals off (#995102).
• Various fixes for minor user interface glitches.
• Fixed broken POP before SMTP (password wasn’t being used).
• Custom option page values ​​now repopulate correctly.
• Added “no focus” option for compose page in display preferences (setting reply focus to “No focus” also affects composing new messages).
• Fix bug when Saving to Draft folder that contains special characters.
• Fix RFC822 incompliant use of IP address in Message ID.
• Uneditable address book entries no longer have checkboxes on addresses page.
• Fix that viewing the last page of a mailbox with one message always claimed that the total of messages in that mailbox was 1.
• Alignment of title text above folder list fixed.
• Added Uighur translation support.
• Added status bar to compose window when “Compose In New Window” is used.
• Fixed issue with user setting display of messages to 0 per page. Fixes bug #960447.
• Detect, handle, and warn on LOGINDISABLED from IMAP server.
• Correctly sort folders including – in the name. Affects folders beginning with the same names, but second folder has – with additional characters. Patch courtesy of Morten Nilsen.
• Added size limit to signatures saved in file backend. Created error_option_save function, that allows sending error message to options page. Thanks to Martynas Bieliauskas for spotting big signature “option”.
• $aggressive_decoding configuration option changed to $aggressive_decoding. Fixed spelling.
• Fixed $custom_css loading in squirrelspell plugin.
• Referenced document (presets.txt) missing. Copied from developer.
• Make SMTP Authentication detection in conf.pl more RFC compliant.
• Fixed IMAP errors when using mail_fetch plugin to auto-fetch on login.
• Fixed folder list in Create Folders list for Courier (properly skip INBOX).
• Corrected poor English in a string (#775978).
• Corrected bug in SquirrelSpell that’d put the corrected spelling on the wrong line if quoting inline, or below the original email (#906217).
• LC_NUMERIC locale is set to C. Some plugins might use decimal delimiters incorrectly (#1027130).
• Turkish translation uses C character case conversion rules. Fixes php and squirrelmail functions are assume English conversion rules.
• Removed X-Mailer header from SquirrelMail. SpamAssassin 3.0 detects User-Agent + X-Priority headers correctly. Older versions have to fix rules/20_head_tests.cf.
• When replying to message with a ” in the subject, the ” was a replaced with a ‘.
• Added Bengali translation support.
• Security: Fixed XSS exploit in decodeHeader function. [CAN-2004-1036]
• Fixed error output in SquirrelSpell plugin (patch courtesy David Boone).
• Fixed bug in IMAP read routines that treated “0” as false instead of a string (patch courtesy Maurice Makaay).
• Fixed PHP notice when header property value is blank.
• Fixed decoding function problems when mbstring.func_override has MB_OVERLOAD_REGEX enabled.
• Removed command line option unsupported by qmail-inject in class/deliver/Deliver_SendMail.class.php. Thanks to Ken Brush.
• Ported charset encoding patches from devel. Closes bug #806698 and patch #550843.
• Ported 8bit read receipts fixes from devel. Close bug #934033.
• Added Net-Style theme by Gabriele Maidecchi. Closes patch #1041323.
• Disabled use of info plugin, when it is not enabled in config.
• Fixed path used by random theme.
• Added global address book configuration support and options to select writeable address book backend. Removed ‘global_file’ address book backend. ‘global_file’ backend functions are provided by ‘local_file’ backend.
• Sanitized nickname and name entries in address listing.
• LDAP backend will use internal squirrelmail charset conversion functions instead of php xml extension. Close bug #655137.
• Fix two time zone calculation bugs, thanks to David White. Fix #1063879.
• Handle a reload of the signout page gracefully: do not present an error about having to be logged in to be able to sign out. Fixes #1070069.
• Prevent “&” being eaten in set_url_var, thanks Marcin Orlowski. Fix #1053725.
• Added size attributes to newmail plugin sounds. Fix #818958.
• Updated translation engine options in translate plugin. Added google translate. Disabled gpltrans engine, because it is no longer available.
• RFC822 header compliance with regards to SM based header containing an extra ; in the Received header. Fix #1088548.
• Add IMAP server type “hmailserver” to make search work with hMailServer. Fixes #1085377.
• Reuploaded newmail plugin sounds. Fixes files uploaded to cvs without binary option.
• Changing your JavaScript preference required a re-login to work. Fix #983614.
• Miscellaneous documentation updates/improvements.
• Compose-in-new didn’t always work with JavaScript disabled. (#801999)

[break] Click for a larger version