add a security patch. bug #135921.

Package-Manager: portage-2.1

5 files changed, 358 insertions, 16 deletions

diff --git a/mail-client/squirrelmail/ChangeLog b/mail-client/squirrelmail/ChangeLog
index a7f77987a905..d433b708fd8f 100644
--- a/mail-client/squirrelmail/ChangeLog
+++ b/mail-client/squirrelmail/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for mail-client/squirrelmail
 # Copyright 2002-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/mail-client/squirrelmail/ChangeLog,v 1.51 2006/05/24 20:16:43 hansmi Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-client/squirrelmail/ChangeLog,v 1.52 2006/06/13 19:59:14 langthang Exp $
+
+*squirrelmail-1.4.6-r3 (13 Jun 2006)
+
+  13 Jun 2006; Tuấn Văn <langthang@gentoo.org> +files/sec-135921.patch,
+  +squirrelmail-1.4.6-r3.ebuild:
+  add a security patch. bug #135921.
 
   24 May 2006; Michael Hanselmann <hansmi@gentoo.org>
   squirrelmail-1.4.6-r2.ebuild:
diff --git a/mail-client/squirrelmail/Manifest b/mail-client/squirrelmail/Manifest
index 499934cccb26..04ce9d46c9b9 100644
--- a/mail-client/squirrelmail/Manifest
+++ b/mail-client/squirrelmail/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX ldapuserdata-0.4-gentoo.patch 709 RMD160 a7b5fe1aba60530c193919ecb6b213cdd57dddf8 SHA1 99f5dd6f4e9666d6d3915c3e52c2694d1dc06a9e SHA256 bff9cf8e7518df983b03b3f4e7f10fcf31fb75f6d73afb21c8923f2a8312b4a3
 MD5 1ebd5ce3ff0ce02fa62f3890b6a8f255 files/ldapuserdata-0.4-gentoo.patch 709
 RMD160 a7b5fe1aba60530c193919ecb6b213cdd57dddf8 files/ldapuserdata-0.4-gentoo.patch 709
@@ -6,28 +9,36 @@ AUX postinstall-en.txt 698 RMD160 7f3b2cfad0cb7c0eef53ecd7ecb49553217d55e7 SHA1
 MD5 a34a9335bafb3173bb60b373caae8c4e files/postinstall-en.txt 698
 RMD160 7f3b2cfad0cb7c0eef53ecd7ecb49553217d55e7 files/postinstall-en.txt 698
 SHA256 4e3702651bb5cce4cc517a2b2bed3e71b137167645138bc72c0cedab4ba98da3 files/postinstall-en.txt 698
+AUX sec-135921.patch 2289 RMD160 184058586ceefafa0ce22faa9035be790b95c9f4 SHA1 634e32d4d69c10a332e64ac815ac1190b6659aec SHA256 10d9b734bbff49b62fd1b9e1497def22d6e425e3f8909c25c7c29c9378ccc2dd
+MD5 84e0d6be246faf2477198be0fb687310 files/sec-135921.patch 2289
+RMD160 184058586ceefafa0ce22faa9035be790b95c9f4 files/sec-135921.patch 2289
+SHA256 10d9b734bbff49b62fd1b9e1497def22d6e425e3f8909c25c7c29c9378ccc2dd files/sec-135921.patch 2289
 AUX squirrelmail-fortune.patch 603 RMD160 4460fc314974b4c4691b69231ccfb51d8fbfe896 SHA1 5e1280b2b991c4a7107409104af646883dde742b SHA256 4346a850d4972a54d642c8a91e331110b063eb3eb363cd904a6573c2f6e9b16e
 MD5 ebb6924dba63e16023a37f0f4f5563e8 files/squirrelmail-fortune.patch 603
 RMD160 4460fc314974b4c4691b69231ccfb51d8fbfe896 files/squirrelmail-fortune.patch 603
 SHA256 4346a850d4972a54d642c8a91e331110b063eb3eb363cd904a6573c2f6e9b16e files/squirrelmail-fortune.patch 603
-DIST admin_add.0.1-1.4.0.tar.gz 2388 RMD160 6847934c59ae73119a796c6fef251de26a2ea531 SHA256 25ec999eea098a509f7d49cfe368b0557b64c698f86b2a2c951617f67735dabc
-DIST all_locales-1.4.6-20060221.tar.bz2 2448102 RMD160 c108485b090ffc8ea96b1384c9cf588adade7ed2 SHA256 e29b017deb84e7a3656ed846b2387911e4c7275e88fd3d6761528dbaa7510ac4
+DIST admin_add.0.1-1.4.0.tar.gz 2388 RMD160 6847934c59ae73119a796c6fef251de26a2ea531 SHA1 9265289ac5b67549590e82d10560d05295a8a5e6 SHA256 25ec999eea098a509f7d49cfe368b0557b64c698f86b2a2c951617f67735dabc
+DIST all_locales-1.4.6-20060221.tar.bz2 2448102 RMD160 c108485b090ffc8ea96b1384c9cf588adade7ed2 SHA1 110dbcd216005138fd8415b569b5b93fb929977e SHA256 e29b017deb84e7a3656ed846b2387911e4c7275e88fd3d6761528dbaa7510ac4
 DIST all_locales-1.5.1-20060219.tar.bz2 2616039 RMD160 681ea1bcbfc5ae57ced11e33cb19731cefa2dd00 SHA256 f27d7f1506607c8cf2651bb4384f5a840eb71f0d38cfae4d77b292c56e49d0a3
 DIST amavisnewsql-0.8.0-1.4.tar.gz 101008 RMD160 72b796565f128354c51e8a04384e49621371cf16 SHA256 f9ef453f80e0a44a22c695712b44af935f6d1a505239bd0cb6470fc27608041c
-DIST compatibility-1.3.tar.gz 5966 RMD160 e36cffcc937c0e95441e6bf9a6806d6d85e7cec3 SHA256 0898fe16921f5c9c3855e65eb0dee9079aafbcb322644fb888397332ce04a12c
-DIST compatibility-2.0.4.tar.gz 18703 RMD160 f5b272fb1598c28be70e16ed4251eefa57f46f8e SHA256 5aa1bbf871a131eeb3d64e9c89b239231927ebc9aee81a272a31d014ccae667e
-DIST gpg.2.0.1-1.4.2.tar.gz 383592 RMD160 f8e53570494b84d61bb467e1fcb368decb9bbd2a SHA256 b4fa8f4112ef8b69d9b79fbc43c8bde3523de5487e1447445deee67b6c66091b
-DIST ldapuserdata-0.4.tar.gz 67439 RMD160 6f7fa3eab6eb2877057fc4d9d360da2e10858ba6 SHA256 ee10b97e99c35b0656e7e87f60785408f3d26a53ee2a0107d8aa04f7947c3ff7
-DIST retrieveuserdata.0.9-1.4.0.tar.gz 10448 RMD160 942d073f86947295ed069ed04e4fc268857932af SHA256 086796d858e781c518b538b37e9ec011d51a2aebd6d14aeba1aa330b58626b8d
-DIST secure_login-1.2-1.2.8.tar.gz 6361 RMD160 e3e35d7acf5f427592915d541ca2aaad79d37b1d SHA256 b3cf5fbf15206ca9f0e00b573408fc78b287fbb2e0d5fcbba93fe6e75ceb4a0b
-DIST show_ssl_link-2.1-1.2.8.tar.gz 5950 RMD160 58f202d7febcde55efdf8a6f312caebf3d4e0d45 SHA256 a5eb5c1eade9fb6fda5f0f9279a8bb186e9d249cae67a98eaf125845f4d177d2
-DIST squirrelmail-1.4.6.tar.bz2 484099 RMD160 3cee894b392620af3e35ef1d00e35775559dd4f7 SHA256 8694412708eeb1f4029a4850e69f4a6891b0959e6315572013f4db9d3addc9d3
+DIST compatibility-1.3.tar.gz 5966 RMD160 e36cffcc937c0e95441e6bf9a6806d6d85e7cec3 SHA1 e9fab8143a28999c1811d68508426918c462c2b6 SHA256 0898fe16921f5c9c3855e65eb0dee9079aafbcb322644fb888397332ce04a12c
+DIST compatibility-2.0.4.tar.gz 18703 RMD160 f5b272fb1598c28be70e16ed4251eefa57f46f8e SHA1 2856094b17f963fc8c366cee263657a8f4195979 SHA256 5aa1bbf871a131eeb3d64e9c89b239231927ebc9aee81a272a31d014ccae667e
+DIST gpg.2.0.1-1.4.2.tar.gz 383592 RMD160 f8e53570494b84d61bb467e1fcb368decb9bbd2a SHA1 2b323d81ac8bc75fcfadb7594ca654c9188d7733 SHA256 b4fa8f4112ef8b69d9b79fbc43c8bde3523de5487e1447445deee67b6c66091b
+DIST ldapuserdata-0.4.tar.gz 67439 RMD160 6f7fa3eab6eb2877057fc4d9d360da2e10858ba6 SHA1 b2ad3425607be839e3e4b9cc212b9c8a40ff439b SHA256 ee10b97e99c35b0656e7e87f60785408f3d26a53ee2a0107d8aa04f7947c3ff7
+DIST retrieveuserdata.0.9-1.4.0.tar.gz 10448 RMD160 942d073f86947295ed069ed04e4fc268857932af SHA1 f91b763293f7777799d46f161aace891ff6f612a SHA256 086796d858e781c518b538b37e9ec011d51a2aebd6d14aeba1aa330b58626b8d
+DIST secure_login-1.2-1.2.8.tar.gz 6361 RMD160 e3e35d7acf5f427592915d541ca2aaad79d37b1d SHA1 9f916df8874347cea8d7b87124a10f2cb231af88 SHA256 b3cf5fbf15206ca9f0e00b573408fc78b287fbb2e0d5fcbba93fe6e75ceb4a0b
+DIST show_ssl_link-2.1-1.2.8.tar.gz 5950 RMD160 58f202d7febcde55efdf8a6f312caebf3d4e0d45 SHA1 e5cc13c41c2059eade1af17f39e2b20b77083b73 SHA256 a5eb5c1eade9fb6fda5f0f9279a8bb186e9d249cae67a98eaf125845f4d177d2
+DIST squirrelmail-1.4.6.tar.bz2 484099 RMD160 3cee894b392620af3e35ef1d00e35775559dd4f7 SHA1 b813aa9f736b4b6c41d1afd35bcbd01604e85cf7 SHA256 8694412708eeb1f4029a4850e69f4a6891b0959e6315572013f4db9d3addc9d3
 DIST squirrelmail-1.5.1.tar.bz2 904370 RMD160 a59df6a73e5694b54d2791d4c139941ef220d2d1 SHA256 3e7f370dd869fb57ed5b3c159d7450c1180309fffeda9dbf168b2d456f477909
-DIST virus_scan.0.5-1.4.0.tar.gz 25179 RMD160 4c4563c421c5b864b231b2a3163d58862ffbc3c6 SHA256 637bbcef80bd1bfbc04a22daa7af0855155261a4f00bd2566aca3d391cb4fa47
+DIST virus_scan.0.5-1.4.0.tar.gz 25179 RMD160 4c4563c421c5b864b231b2a3163d58862ffbc3c6 SHA1 3b43104dc2ff5ab9a35dc77a7aec1d6b7b245732 SHA256 637bbcef80bd1bfbc04a22daa7af0855155261a4f00bd2566aca3d391cb4fa47
 EBUILD squirrelmail-1.4.6-r2.ebuild 5657 RMD160 4e0c21570c704c302b8b41e7c10b9856f1107708 SHA1 3b8bac55200a4e01e5d9e04a28fbde5ac33c1fb7 SHA256 2b2cf9e00aad4d62f7388402690628f7b88230d955b5a3ecbe607ac2215b7e2a
 MD5 7cac96a276a81a7ada66762b6c25efe5 squirrelmail-1.4.6-r2.ebuild 5657
 RMD160 4e0c21570c704c302b8b41e7c10b9856f1107708 squirrelmail-1.4.6-r2.ebuild 5657
 SHA256 2b2cf9e00aad4d62f7388402690628f7b88230d955b5a3ecbe607ac2215b7e2a squirrelmail-1.4.6-r2.ebuild 5657
+EBUILD squirrelmail-1.4.6-r3.ebuild 5736 RMD160 918132fc1ed6b149068b889fb7a6969354bd29b6 SHA1 58aaf80b7c8506403d041419740f7de8398de6db SHA256 dc634d0f031e5d293d13b750d10bf2a8b7ea429781669b42f1ee412bab14a266
+MD5 abdbfeb7e0f07fd1f242f7e2773a342e squirrelmail-1.4.6-r3.ebuild 5736
+RMD160 918132fc1ed6b149068b889fb7a6969354bd29b6 squirrelmail-1.4.6-r3.ebuild 5736
+SHA256 dc634d0f031e5d293d13b750d10bf2a8b7ea429781669b42f1ee412bab14a266 squirrelmail-1.4.6-r3.ebuild 5736
 EBUILD squirrelmail-1.4.6.ebuild 5473 RMD160 314f04a3e8627fa7f40366a34757e9052a16d878 SHA1 25cbaab75f1d824f2add6735b77574fddb5e0370 SHA256 5c8739ce5b0f1fe2dde15a6ef961c6f06375d387b60c22838d5fee036747f9eb
 MD5 588992d86d51214c78b2734b356fa800 squirrelmail-1.4.6.ebuild 5473
 RMD160 314f04a3e8627fa7f40366a34757e9052a16d878 squirrelmail-1.4.6.ebuild 5473
@@ -36,10 +47,10 @@ EBUILD squirrelmail-1.5.1-r1.ebuild 4933 RMD160 3f9640895823780b313786eb297d410a
 MD5 928387d90667f9bd44a82832f98b46cc squirrelmail-1.5.1-r1.ebuild 4933
 RMD160 3f9640895823780b313786eb297d410a63cb2114 squirrelmail-1.5.1-r1.ebuild 4933
 SHA256 6dbcf5daedc849d9df6cb35d9843ddbbd586e5000a240d40701a36daced58687 squirrelmail-1.5.1-r1.ebuild 4933
-MISC ChangeLog 15876 RMD160 0cadb0173439853053278211fa8f648e177aaff3 SHA1 85c44e859f2152c95fe11cdc25324dcedaf0ff44 SHA256 74f849a3f8413d1a5773dfb7728d56250ea36c2ca372c8d4a3e5bced1fa306c5
-MD5 8e18b1c38d1804790a37b7166a61fe91 ChangeLog 15876
-RMD160 0cadb0173439853053278211fa8f648e177aaff3 ChangeLog 15876
-SHA256 74f849a3f8413d1a5773dfb7728d56250ea36c2ca372c8d4a3e5bced1fa306c5 ChangeLog 15876
+MISC ChangeLog 16063 RMD160 fab88e303ec30d0a4ca06d17e3dc5e721306acd0 SHA1 f05d163f0fb9820e55c6304e4e7f6bfe61bb1f41 SHA256 4327bff6d09b5f20428267e3361d9ff62ed9299c3af0a7560c314b312b64e4af
+MD5 54830a7929fec81f49d0b4576ebe10ee ChangeLog 16063
+RMD160 fab88e303ec30d0a4ca06d17e3dc5e721306acd0 ChangeLog 16063
+SHA256 4327bff6d09b5f20428267e3361d9ff62ed9299c3af0a7560c314b312b64e4af ChangeLog 16063
 MISC metadata.xml 258 RMD160 d2eb817fc980ecb7e48b90373e39e38538ddc060 SHA1 f969f9d21f42c6347a0509bacb7382b390c10ce8 SHA256 0c209e720f028e6e9b098d29eab884753668aea3f47b56e44f3271ae60750680
 MD5 08cd5d6f4b8f101029a526ea0a1ea4b1 metadata.xml 258
 RMD160 d2eb817fc980ecb7e48b90373e39e38538ddc060 metadata.xml 258
@@ -50,6 +61,16 @@ SHA256 61df34c17f9a5ef184d3c7edb52263986fa60591d174f6f983d359a103d38146 files/di
 MD5 0e654bbe795ff3cd52fbc15189be35a3 files/digest-squirrelmail-1.4.6-r2 2620
 RMD160 1ba06f121431ed6f72dbd4badf409048362110d5 files/digest-squirrelmail-1.4.6-r2 2620
 SHA256 4fc42d52adfcd59d91b6f343f8b01efd81a78a0ed22c68b41ae25efaa02c65e0 files/digest-squirrelmail-1.4.6-r2 2620
+MD5 0e654bbe795ff3cd52fbc15189be35a3 files/digest-squirrelmail-1.4.6-r3 2620
+RMD160 1ba06f121431ed6f72dbd4badf409048362110d5 files/digest-squirrelmail-1.4.6-r3 2620
+SHA256 4fc42d52adfcd59d91b6f343f8b01efd81a78a0ed22c68b41ae25efaa02c65e0 files/digest-squirrelmail-1.4.6-r3 2620
 MD5 10158f243a971cc8a428d8cf28277d6e files/digest-squirrelmail-1.5.1-r1 2620
 RMD160 9554715d0ebf965895727b5a18cb57b092e65376 files/digest-squirrelmail-1.5.1-r1 2620
 SHA256 cffb974aa68e0f7c611ea500a3664b6c781dc3682c645821f0b987a06fbcc20d files/digest-squirrelmail-1.5.1-r1 2620
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.3 (GNU/Linux)
+
+iD8DBQFEjxk/5FrxP71izLARAlidAJ9uI0THF1UPtnfF1TdRh+xFdZGftgCgoeyl
+YVb2l9SUyijOA6vEnUmUEmA=
+=c64X
+-----END PGP SIGNATURE-----
diff --git a/mail-client/squirrelmail/files/digest-squirrelmail-1.4.6-r3 b/mail-client/squirrelmail/files/digest-squirrelmail-1.4.6-r3
new file mode 100644
index 000000000000..8b65672f432a
--- /dev/null
+++ b/mail-client/squirrelmail/files/digest-squirrelmail-1.4.6-r3
@@ -0,0 +1,30 @@
+MD5 c321d0f7efa624f6bc3f3a4d1bf08782 admin_add.0.1-1.4.0.tar.gz 2388
+RMD160 6847934c59ae73119a796c6fef251de26a2ea531 admin_add.0.1-1.4.0.tar.gz 2388
+SHA256 25ec999eea098a509f7d49cfe368b0557b64c698f86b2a2c951617f67735dabc admin_add.0.1-1.4.0.tar.gz 2388
+MD5 29dfec2e0f71fba368a89c36c51881c2 all_locales-1.4.6-20060221.tar.bz2 2448102
+RMD160 c108485b090ffc8ea96b1384c9cf588adade7ed2 all_locales-1.4.6-20060221.tar.bz2 2448102
+SHA256 e29b017deb84e7a3656ed846b2387911e4c7275e88fd3d6761528dbaa7510ac4 all_locales-1.4.6-20060221.tar.bz2 2448102
+MD5 4766f5f6706e086d5c9370bef9e7629f amavisnewsql-0.8.0-1.4.tar.gz 101008
+RMD160 72b796565f128354c51e8a04384e49621371cf16 amavisnewsql-0.8.0-1.4.tar.gz 101008
+SHA256 f9ef453f80e0a44a22c695712b44af935f6d1a505239bd0cb6470fc27608041c amavisnewsql-0.8.0-1.4.tar.gz 101008
+MD5 cfc3279a613b917fcba8200c596dadb0 compatibility-2.0.4.tar.gz 18703
+RMD160 f5b272fb1598c28be70e16ed4251eefa57f46f8e compatibility-2.0.4.tar.gz 18703
+SHA256 5aa1bbf871a131eeb3d64e9c89b239231927ebc9aee81a272a31d014ccae667e compatibility-2.0.4.tar.gz 18703
+MD5 88f80922e2a060f5277fd2192404efab gpg.2.0.1-1.4.2.tar.gz 383592
+RMD160 f8e53570494b84d61bb467e1fcb368decb9bbd2a gpg.2.0.1-1.4.2.tar.gz 383592
+SHA256 b4fa8f4112ef8b69d9b79fbc43c8bde3523de5487e1447445deee67b6c66091b gpg.2.0.1-1.4.2.tar.gz 383592
+MD5 c836661e8360358b94df4e153e449b2c ldapuserdata-0.4.tar.gz 67439
+RMD160 6f7fa3eab6eb2877057fc4d9d360da2e10858ba6 ldapuserdata-0.4.tar.gz 67439
+SHA256 ee10b97e99c35b0656e7e87f60785408f3d26a53ee2a0107d8aa04f7947c3ff7 ldapuserdata-0.4.tar.gz 67439
+MD5 dfe469f7ab473fd2292b30800e3141d5 retrieveuserdata.0.9-1.4.0.tar.gz 10448
+RMD160 942d073f86947295ed069ed04e4fc268857932af retrieveuserdata.0.9-1.4.0.tar.gz 10448
+SHA256 086796d858e781c518b538b37e9ec011d51a2aebd6d14aeba1aa330b58626b8d retrieveuserdata.0.9-1.4.0.tar.gz 10448
+MD5 73d2c111579e2fad17c289f62e0be855 secure_login-1.2-1.2.8.tar.gz 6361
+RMD160 e3e35d7acf5f427592915d541ca2aaad79d37b1d secure_login-1.2-1.2.8.tar.gz 6361
+SHA256 b3cf5fbf15206ca9f0e00b573408fc78b287fbb2e0d5fcbba93fe6e75ceb4a0b secure_login-1.2-1.2.8.tar.gz 6361
+MD5 a14a46388ed710a81c356d69276844c1 show_ssl_link-2.1-1.2.8.tar.gz 5950
+RMD160 58f202d7febcde55efdf8a6f312caebf3d4e0d45 show_ssl_link-2.1-1.2.8.tar.gz 5950
+SHA256 a5eb5c1eade9fb6fda5f0f9279a8bb186e9d249cae67a98eaf125845f4d177d2 show_ssl_link-2.1-1.2.8.tar.gz 5950
+MD5 300ddcf66b7907a61b6e9404840e35de squirrelmail-1.4.6.tar.bz2 484099
+RMD160 3cee894b392620af3e35ef1d00e35775559dd4f7 squirrelmail-1.4.6.tar.bz2 484099
+SHA256 8694412708eeb1f4029a4850e69f4a6891b0959e6315572013f4db9d3addc9d3 squirrelmail-1.4.6.tar.bz2 484099
diff --git a/mail-client/squirrelmail/files/sec-135921.patch b/mail-client/squirrelmail/files/sec-135921.patch
new file mode 100644
index 000000000000..88c4387c28b8
--- /dev/null
+++ b/mail-client/squirrelmail/files/sec-135921.patch
@@ -0,0 +1,75 @@
+--- functions/global.php	2006-02-03 14:27:47.000000000 -0800
++++ functions/global.php.new	2006-06-13 12:28:12.000000000 -0700
+@@ -3,14 +3,13 @@
+ /**
+  * global.php
+  *
+- * Copyright (c) 1999-2006 The SquirrelMail Project Team
+- * Licensed under the GNU GPL. For full terms see the file COPYING.
+- *
+  * This includes code to update < 4.1.0 globals to the newer format
+  * It also has some session register functions that work across various
+  * php versions.
+  *
+- * @version $Id: global.php,v 1.27.2.15 2006/02/03 22:27:47 jervfors Exp $
++ * @copyright &copy; 1999-2006 The SquirrelMail Project Team
++ * @license http://opensource.org/licenses/gpl-license.php GNU Public License
++ * @version $Id: global.php,v 1.27.2.17 2006/06/02 02:52:15 jangliss Exp $
+  * @package squirrelmail
+  */
+ 
+@@ -62,6 +61,47 @@
+     sqstripslashes($_POST);
+ }
+ 
++/**
++ * If register_globals are on, unregister globals.
++ * Code requires PHP 4.1.0 or newer.
++ * Second test covers boolean set as string (php_value register_globals off).
++ */
++if ((bool) @ini_get('register_globals') &&
++    strtolower(ini_get('register_globals'))!='off') {
++    /**
++     * Remove all globals from $_GET, $_POST, and $_COOKIE.
++     */
++    foreach ($_REQUEST as $key => $value) {
++        unset($GLOBALS[$key]);
++    }
++    /**
++     * Remove globalized $_FILES variables
++     * Before 4.3.0 $_FILES are included in $_REQUEST.
++     * Unglobalize them in separate call in order to remove dependency
++     * on PHP version.
++     */
++    foreach ($_FILES as $key => $value) {
++        unset($GLOBALS[$key]);
++        // there are three undocumented $_FILES globals.
++        unset($GLOBALS[$key.'_type']);
++        unset($GLOBALS[$key.'_name']);
++        unset($GLOBALS[$key.'_size']);
++    }
++    /**
++     * Remove globalized environment variables.
++     */
++    foreach ($_ENV as $key => $value) {
++        unset($GLOBALS[$key]);
++    }
++    /**
++     * Remove globalized server variables.
++     */
++    foreach ($_SERVER as $key => $value) {
++        unset($GLOBALS[$key]);
++    }
++}
++
++
+ /* strip any tags added to the url from PHP_SELF.
+    This fixes hand crafted url XXS expoits for any
+    page that uses PHP_SELF as the FORM action */
+@@ -336,4 +376,4 @@
+ }
+ 
+ // vim: et ts=4
+-?>
+\ No newline at end of file
++?>
diff --git a/mail-client/squirrelmail/squirrelmail-1.4.6-r3.ebuild b/mail-client/squirrelmail/squirrelmail-1.4.6-r3.ebuild
new file mode 100644
index 000000000000..735341a70b4b
--- /dev/null
+++ b/mail-client/squirrelmail/squirrelmail-1.4.6-r3.ebuild
@@ -0,0 +1,210 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/mail-client/squirrelmail/squirrelmail-1.4.6-r3.ebuild,v 1.1 2006/06/13 19:59:14 langthang Exp $
+
+IUSE="crypt ldap spell ssl filter mysql postgres nls"
+
+inherit webapp eutils
+
+DESCRIPTION="Webmail for nuts!"
+
+# Plugin Versions
+COMPATIBILITY_VER=2.0.4
+USERDATA_VER=0.9-1.4.0
+ADMINADD_VER=0.1-1.4.0
+AMAVIS_VER=0.8.0-1.4
+GPG_VER=2.0.1-1.4.2
+LDAP_USERDATA_VER=0.4
+SECURELOGIN_VER=1.2-1.2.8
+SHOWSSL_VER=2.1-1.2.8
+LOCALES_VER=1.4.6-20060221
+
+MY_P=${P/_rc/-RC}
+S="${WORKDIR}/${MY_P}"
+
+PLUGINS_LOC="http://www.squirrelmail.org/plugins"
+SRC_URI="mirror://sourceforge/${PN}/${MY_P}.tar.bz2
+	mirror://sourceforge/retruserdata/retrieveuserdata.${USERDATA_VER}.tar.gz
+	${PLUGINS_LOC}/compatibility-${COMPATIBILITY_VER}.tar.gz
+	ssl? ( ${PLUGINS_LOC}/secure_login-${SECURELOGIN_VER}.tar.gz )
+	ssl? ( ${PLUGINS_LOC}/show_ssl_link-${SHOWSSL_VER}.tar.gz )
+	${PLUGINS_LOC}/admin_add.${ADMINADD_VER}.tar.gz
+	filter? ( ${PLUGINS_LOC}/amavisnewsql-0.8.0-1.4.tar.gz )
+	crypt? ( ${PLUGINS_LOC}/gpg.${GPG_VER}.tar.gz )
+	ldap? ( ${PLUGINS_LOC}/ldapuserdata-${LDAP_USERDATA_VER}.tar.gz )
+	nls? ( mirror://sourceforge/${PN}/all_locales-${LOCALES_VER}.tar.bz2 )"
+
+HOMEPAGE="http://www.squirrelmail.org/"
+
+LICENSE="GPL-2"
+KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 ~sparc ~x86"
+
+DEPEND=""
+
+RDEPEND="virtual/php
+	perl-core/DB_File
+	crypt? ( app-crypt/gnupg )
+	ldap? ( net-nds/openldap )
+	spell? ( || ( app-text/aspell app-text/ispell ) )
+	filter? ( mail-filter/amavisd-new dev-php/PEAR-Log dev-php/PEAR-DB dev-php/PEAR-Net_SMTP )
+	postgres? ( dev-php/PEAR-DB )
+	mysql? ( dev-php/PEAR-DB )"
+
+src_unpack() {
+	unpack ${MY_P}.tar.bz2
+
+	cd ${S}
+
+	mv config/config_default.php config/config.php
+
+	# Now do the plugins
+	cd ${S}/plugins
+
+	sed -i 's:/usr/games/fortune:/usr/bin/fortune:g' fortune/setup.php || die "Unable to fix fortunes plugin."
+
+	unpack compatibility-${COMPATIBILITY_VER}.tar.gz
+
+	unpack admin_add.${ADMINADD_VER}.tar.gz
+
+	unpack retrieveuserdata.${USERDATA_VER}.tar.gz
+
+	use filter &&
+		unpack amavisnewsql-${AMAVIS_VER}.tar.gz &&
+		mv amavisnewsql/config.php.dist amavisnewsql/config.php
+
+	use crypt &&
+		unpack gpg.${GPG_VER}.tar.gz
+
+	use ldap &&
+		unpack ldapuserdata-${LDAP_USERDATA_VER}.tar.gz &&
+		epatch ${FILESDIR}/ldapuserdata-${LDAP_USERDATA_VER}-gentoo.patch &&
+		mv ldapuserdata/config_sample.php ldapuserdata/config.php
+
+	use ssl &&
+		unpack secure_login-${SECURELOGIN_VER}.tar.gz &&
+		mv secure_login/config.php.sample secure_login/config.php &&
+		unpack show_ssl_link-${SHOWSSL_VER}.tar.gz &&
+		mv show_ssl_link/config.php.sample show_ssl_link/config.php
+
+	use nls &&
+		cd ${S} &&
+		unpack all_locales-${LOCALES_VER}.tar.bz2
+
+	# security patch. Bug #135921.
+	epatch "${FILESDIR}"/sec-135921.patch
+}
+
+src_compile() {
+	#we need to have this empty function ... default compile hangs
+	echo "Nothing to compile"
+}
+
+src_install() {
+	webapp_src_preinst
+
+	# handle documentation files
+	#
+	# NOTE that doc files go into /usr/share/doc as normal; they do NOT
+	# get installed per vhost!
+
+	for doc in AUTHORS COPYING ChangeLog INSTALL README ReleaseNotes UPGRADE; do
+		dodoc ${doc}
+		rm -f ${doc}
+	done
+
+	docinto compatibility
+	for doc in plugins/compatibility/INSTALL plugins/compatibility/README; do
+		dodoc ${doc}
+		rm -f ${doc}
+	done
+
+	docinto admin_add
+	for doc in plugins/admin_add/README; do
+		dodoc ${doc}
+		rm -f ${doc}
+	done
+
+	docinto retrieveuserdata
+	for doc in plugins/retrieveuserdata/INSTALL plugins/retrieveuserdata/changelog plugins/retrieveuserdata/users_example.txt; do
+		dodoc ${doc}
+		rm -f ${doc}
+	done
+
+	if use filter; then
+		docinto amavisnewsql
+		for doc in plugins/amavisnewsql/{CHANGELOG,README,UPGRADE}; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+	fi
+
+	if use crypt; then
+		docinto gpg
+		for doc in plugins/gpg/README plugins/gpg/README.txt plugins/gpg/INSTALL plugins/gpg/INSTALL.txt plugins/gpg/TODO; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+	fi
+
+	if use ldap; then
+		rm plugins/ldapuserdata/README
+		docinto ldapuserdata
+		for doc in plugins/ldapuserdata/doc/README; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+	fi
+
+	if use ssl; then
+		docinto secure_login
+		for doc in plugins/secure_login/INSTALL plugins/secure_login/README; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+
+		docinto show_ssl_link
+		for doc in plugins/show_ssl_link/INSTALL plugins/show_ssl_link/README; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+	fi
+
+	# Copy the app's main files
+	einfo "Installing squirrelmail files."
+	cp -r . ${D}${MY_HTDOCSDIR}
+
+	# Identify the configuration files that this app uses
+	local configs="config/config.php config/config_local.php plugins/retrieveuserdata/config.php"
+	use filter && configs="${configs} plugins/amavisnewsql/config.php"
+	use crypt && configs="${configs} plugins/gpg/gpg_local_prefs.txt"
+	use ldap && configs="${configs} plugins/ldapuserdata/config.php"
+	use ssl && configs="${configs} plugins/show_ssl_link/config.php plugins/secure_login/config.php"
+
+	for file in ${configs}; do
+		webapp_configfile ${MY_HTDOCSDIR}/${file}
+	done
+
+	# Identify any script files that need #! headers adding to run under
+	# a CGI script (such as PHP/CGI)
+	#
+	# for phpmyadmin, we *assume* that all .php files that don't end in
+	# .inc.php need to have CGI/BIN support added
+
+	#for x in `find . -name '*.php' -print | grep -v 'inc.php'` ; do
+	#	webapp_runbycgibin php ${MY_HTDOCSDIR}/$x
+	#done
+
+	local server_owned="data index.php"
+	for file in ${server_owned}; do
+		webapp_serverowned ${MY_HTDOCSDIR}/${file}
+	done
+
+	# add the post-installation instructions
+	webapp_postinst_txt en ${FILESDIR}/postinstall-en.txt
+
+	# all done
+	#
+	# now we let the eclass strut its stuff ;-)
+
+	webapp_src_install
+}