Subject: CVS commit: [pkgsrc-2016Q1] pkgsrc/mail/roundcube
From: Benny Siegert
Date: 2016-06-04 21:39:34
Message id: 20160604193934.97C4FFBB5@cvs.NetBSD.org

Log Message:
Pullup ticket #5033 - requested by taca
mail/roundcube: security fix

Revisions pulled up:
- mail/roundcube/Makefile                                       1.81-1.83
- mail/roundcube/PLIST                                          1.40-1.41
- mail/roundcube/distinfo                                       1.49-1.51
- mail/roundcube/patches/patch-config.inc.php                   deleted
- mail/roundcube/patches/patch-plugins_password_helpers_passwd-expect 1.1
- mail/roundcube/patches/patch-program_lib_Roundcube_rcube__washtml.php 1.3

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May 26 03:20:37 UTC 2016

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile PLIST distinfo
   Removed Files:
   	pkgsrc/mail/roundcube/patches: patch-config.inc.php

   Log Message:
   Update roundcube to 1.1.5, including security fix.

   RELEASE 1.1.5
   -------------
   - Plugin API: Add html2text hook
   - Plugin API: Added addressbook_export hook
   - Fix missing emoticons on html-to-text conversion
   - Fix random "access to this resource is secured against CSRF" \ 
message at logout (#4956)
   - Fix missing language name in "Add to Dictionary" request in HTML \ 
mode (#4951)
   - Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955)
   - Fix XSS issue in SVG images handling (#4949)
   - Fix (again) security issue in DBMail driver of password plugin \ 
[CVE-2015-2181] (#4958)
   - Fix bug where Archive/Junk buttons were not active after page jump with \ 
select=all mode (#4961)
   - Fix bug in long recipients list parsing for cases where recipient name \ 
contained @-char (#4964)
   - Fix additional_message_headers plugin compatibility with Mail_Mime >= \ 
1.9 (#4966)
   - Hide DSN option in Preferences when smtp_server is not used (#4967)
   - Protect download urls against CSRF using unique request tokens (#4957)
   - newmail_notifier: Refactor desktop notifications
   - Fix so contactlist_fields option can be set via config file
   - Fix so SPECIAL-USE assignments are forced only until user sets special \ 
folders (#4782)
   - Fix performance in reverting order of THREAD result
   - Fix converting mail addresses with @www. into mailto links (#5197)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May 26 03:23:39 UTC 2016

   Added Files:
   	pkgsrc/mail/roundcube/patches:
   	    patch-plugins_password_helpers_passwd-expect

   Log Message:
   Oops, forgot to add a patch file for NetBSD (and perhaps for *BSD) to
   make password plugin work.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May 26 23:22:17 UTC 2016

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile distinfo
   Added Files:
   	pkgsrc/mail/roundcube/patches:
   	    patch-program_lib_Roundcube_rcube__washtml.php

   Log Message:
   Update security path for CVE-2016-5103 (XSS) from upstream.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun May 29 15:46:59 UTC 2016

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile PLIST distinfo

   Log Message:
   Switch to get distfiles from GitHub, noted by David Brownlee via private
   e-mail.

   And some installed files are changed, bump PKGREVISION.

Files:
RevisionActionfile
1.80.2.1modifypkgsrc/mail/roundcube/Makefile
1.48.4.1modifypkgsrc/mail/roundcube/distinfo
1.1.2.2addpkgsrc/mail/roundcube/patches/patch-plugins_password_helpers_passwd-expect
1.3.2.2addpkgsrc/mail/roundcube/patches/patch-program_lib_Roundcube_rcube__washtml.php
1.2removepkgsrc/mail/roundcube/patches/patch-config.inc.php