Aleksander Machniak 2e6a99b2a3 Fix bug where a password could get changed without providing the old password ...

The password plugin uses loose comparison, leading to a type juggling vulnerability that
allows password changes without knowing the old password in specific cases.

Reported by flydragon777

2026-03-18 12:40:11 +01:00

..

acl

Fix PHP8 warnings

2023-06-02 13:16:12 +02:00

additional_message_headers

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

archive

Update localization

2021-10-29 10:38:40 +02:00

attachment_reminder

Update localization

2021-10-29 10:38:40 +02:00

autologon

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

database_attachments

Fix PHP8 warnings

2021-06-27 07:55:15 +02:00

debug_logger

Debug_logger: Fix the main plugin functionality and documentation (#8041)

2021-05-03 10:01:42 +02:00

emoticons

Fix compat with PHP 5.4 (#8365)

2021-12-17 19:13:30 +01:00

enigma

Enigma: Fix finding of a private key when decrypting a message using GnuPG v2.3

2023-11-22 18:46:31 +01:00

example_addressbook

Fix contacts list title for groups from example_addressbook

2021-07-16 13:05:56 +02:00

filesystem_attachments

Fix PHP8 warnings

2021-06-27 07:55:15 +02:00

help

Update localization

2021-10-29 10:38:40 +02:00

hide_blockquote

Update localization

2021-10-29 10:38:40 +02:00

http_authentication

Spelling (#8001)

2021-04-18 08:43:18 +02:00

identicon

Spelling (#8001)

2021-04-18 08:43:18 +02:00

identity_select

Fix a couple of PHP8 warnings (#8420)

2022-01-29 08:37:35 +01:00

jqueryui

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

krb_authentication

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

managesieve

Managesieve: Fix current script state after initial scripts creation in managesieve_kolab_master mode

2024-09-25 11:47:57 +02:00

markasjunk

Update localization

2021-10-29 10:38:40 +02:00

new_user_dialog

new_user_dialog: Use the identity_update hook (#8023)

2021-05-06 12:06:17 +02:00

new_user_identity

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

newmail_notifier

Improve the notification sound (#8155)

2021-08-04 08:45:10 +02:00

password

Fix bug where a password could get changed without providing the old password

2026-03-18 12:40:11 +01:00

reconnect

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

redundant_attachments

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

show_additional_headers

Fix handling of headers that occur multiple times by show_additional_headers plugin (#8157)

2021-08-04 08:29:58 +02:00

squirrelmail_usercopy

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

subscriptions_option

subscriptions_option: Honor search parameters (#8312)

2021-12-04 09:13:16 +01:00

userinfo

Update localization

2021-10-29 10:38:40 +02:00

vcard_attachments

Update localization

2021-10-29 10:38:40 +02:00

virtuser_file

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

virtuser_query

Use official GPL-3.0-or-later license identifier (#7901)

2021-02-24 15:39:36 +01:00

zipdownload

Update localization

2021-10-29 10:38:40 +02:00