Subject: CVS commit: [pkgsrc-2012Q2] pkgsrc/mail/roundcube
From: Matthias Scheler
Date: 2012-09-04 22:30:26
Message id: 20120904203026.7E064175DD@cvs.netbsd.org

Log Message:
Pullup ticket #3915 - requested by taca
mail/roundcube: security update

Revisions pulled up:
- mail/roundcube/MESSAGE                                        1.7
- mail/roundcube/Makefile                                       1.44-1.46
- mail/roundcube/PLIST                                          1.24
- mail/roundcube/distinfo                                       1.25

---
   Module Name:	pkgsrc
   Committed By:	fhajny
   Date:		Wed Jul 25 11:24:21 UTC 2012

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile

   Log Message:
   Make package more portable by pre-creating destination for pax

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 16:19:41 UTC 2012

   Modified Files:
   	pkgsrc/mail/roundcube: MESSAGE Makefile

   Log Message:
   Some tweak in MESSAGE.

   * Note UPGRADING document which describes update process.
   * Remove note for older package.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Aug 21 15:26:32 UTC 2012

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile PLIST distinfo

   Log Message:
   Update roundcube to 0.8.1.

   Fixes two XSS issue.

   Here is quote from changelog of 0.8.1, please refer CHAGNGELOG file for
   full changes from 0.7.2.

   - Fix bug where domain name was converted to lower-case even with \ 
login_lc=false (#1488593)
   - Fix lower-casing email address on replies (#1488598)
   - Fix line separator in exported messages (#1488603)
   - Fix XSS issue where plain signatures wasn't secured in HTML mode (#1488613)
   - Fix XSS issue where href="javascript:" wasn't secured (#1488613)
   - Fix impossible to create message with empty plain text part (#1488610)
   - Fix stripped apostrophes when replying in plain text to HTML message (#1488606)
   - Fix inactive Save search option after advanced search (#1488607)
   - Fix Remove from group option is active for contact search result (#1488608)
   - Disable autocapitalization in login form on iPad/iPhone (#1488609)
   - Fix focus on the list when list row is clicked (#1488600)
   - Added separate From and To columns apart from smart From/To column (#1486891)
   - Fix fallback to Larry skin when configured skin isn't available (#1488591)
   - Fix (workaround) delete operations with some versions of memcache (#1488592)
   - Fix (disable) request validation for spell and spell_html actions

Files:
RevisionActionfile
1.6.34.1modifypkgsrc/mail/roundcube/MESSAGE
1.43.2.1modifypkgsrc/mail/roundcube/Makefile
1.23.2.1modifypkgsrc/mail/roundcube/PLIST
1.24.4.1modifypkgsrc/mail/roundcube/distinfo