- Software: https://roundcube.net/
- Versions: 1.1.0 - 1.1.9, 1.2.0 - 1.2.6, 1.3.0 - 1.3.2
- CVE: CVE-2017-16651
- Author: Thomas Bruederli
- Release date: 2017-11-09
Roundcube Webmail allows unauthorized access to arbitrary files on the
| const bent = require('bent'); | |
| const httpJSON = bent('json'); | |
| const admin = require('firebase-admin'); | |
| const DOCKER_BUILD_TRIGGER = 'https://hub.docker.com/api/build/v1/source/<this-is-secret>/trigger/<another-secret>/call/'; | |
| const BUILD_TAGS = { | |
| '1.3.x-apache': '7.2-apache', | |
| '1.3.x-fpm': '7.2-fpm', | |
| '1.3.x-fpm-alpine': '7.2-fpm-alpine', | |
| '1.4.x-apache': '7.3-apache', | |
| '1.4.x-fpm': '7.3-fpm', |
| <?php | |
| /** | |
| * Converts a PNG image to a .GRF file for use with Zebra printers | |
| * | |
| * The input is preferably a 1-bit black/white image but RGB images | |
| * are accepted as well. | |
| * | |
| * This function uses PHP's GD library image functions. | |
| * |
Roundcube Webmail allows unauthorized access to arbitrary files on the
| <?php | |
| use \Sabre\VObject; | |
| // use composer autoloader | |
| require_once 'vendor/autoload.php'; | |
| /** | |
| * Returns a VTIMEZONE component for a Olson timezone identifier | |
| * with daylight transitions covering the given date range. |
| // Use Gists to store code you would like to remember later on | |
| console.log(window); // log the "window" object to the console |
| # replace the values for these placeholders to match your environment | |
| variables = { | |
| 'skin': 'kolab', | |
| } | |
| # General information about the project. | |
| project = u'Kolab Groupware Help' | |
| copyright = u'2014, kolab.org' | |
| version = '3.1' |
| diff --git a/_static/default.css b/_static/default.css | |
| index b6f8f62..378107f 100755 | |
| --- a/_static/default.css | |
| +++ b/_static/default.css | |
| @@ -26,7 +26,7 @@ body { | |
| div.banner { | |
| margin: 0 0 3px 0; | |
| padding: 10px 0; | |
| - height: 40px; | |
| + height: 16px; |
| <?php | |
| /* | |
| * This file is part of Composer. | |
| * | |
| * (c) Thomas Bruederli <[email protected]> | |
| * | |
| * For the full copyright and license information, please view the LICENSE | |
| * file that was distributed with this source code. | |
| */ |
| <?php | |
| /** | |
| * Distributed Composer package registration script | |
| * | |
| * This script registers the given composer module to the local installation registry | |
| * in order to let composer.phar build autoloader files for installed modules. | |
| * | |
| * Usage: php add-package.php <PATH-TO-MODULE-COMPOSER.JSON> <VERSION> | |
| * |
This is simple approach to work-around the missing --global option in Composer. See composer/composer#55
It reads the dependencies from a local composer.json file and installs them
into a global location (e.g. /usr/local/lib/composer) and creates a light-weight
local Composer installation providing the necessary autoload magic.