Subject: CVS commit: [pkgsrc-2017Q3] pkgsrc/mail
From: S.P.Zeidler
Date: 2017-11-12 14:15:45
Message id: 20171112131545.2E655FBDE@cvs.NetBSD.org

Log Message:
Pullup ticket #5635 - requested by taca
mail/roundcube: security update
mail/roundcube-plugin-enigma: security update
mail/roundcube-plugin-password: security update
mail/roundcube-plugin-zipdownload: security update

Revisions pulled up:
- mail/roundcube-plugin-enigma/distinfo                         1.7
- mail/roundcube-plugin-password/distinfo                       1.7
- mail/roundcube-plugin-zipdownload/distinfo                    1.7
- mail/roundcube/Makefile.common                                1.7
- mail/roundcube/distinfo                                       1.58

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Nov  9 01:13:12 UTC 2017

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile.common distinfo
   	pkgsrc/mail/roundcube-plugin-enigma: distinfo
   	pkgsrc/mail/roundcube-plugin-password: distinfo
   	pkgsrc/mail/roundcube-plugin-zipdownload: distinfo

   Log Message:
   mail/roundcube: update to 1.2.7

   Security fix for CVE-2017-16651.

   RELEASE 1.2.7
   -------------
   - Fix rewind(): stream does not support seeking (#5950)
   - Fix bug where HTML messages could have been rendered empty on some systems
     (#5957)
   - Fix (again) bug where image data URIs in css style were treated as
     evil/remote in mail preview (#5580)
   - Managesieve: Fix parsing dot-staffed lines in multiline text (#5838, #5959)
   - Fix file disclosure vulnerability caused by insufficient input validation
     [CVE-2017-16651] (#6026)

   To generate a diff of this commit:
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube/Makefile.common
   cvs rdiff -u -r1.57 -r1.58 pkgsrc/mail/roundcube/distinfo
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-enigma/distinfo
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-password/distinfo
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-zipdownload/distinfo

Files:
RevisionActionfile
1.6.4.1modifypkgsrc/mail/roundcube/Makefile.common
1.57.4.1modifypkgsrc/mail/roundcube/distinfo
1.6.4.1modifypkgsrc/mail/roundcube-plugin-enigma/distinfo
1.6.4.1modifypkgsrc/mail/roundcube-plugin-password/distinfo
1.6.4.1modifypkgsrc/mail/roundcube-plugin-zipdownload/distinfo