Subject: CVS commit: [pkgsrc-2018Q1] pkgsrc/mail/squirrelmail
From: S.P.Zeidler
Date: 2018-05-06 13:41:44
Message id: 20180506114145.104BDFBEC@cvs.NetBSD.org

Log Message:
Pullup ticket #5751 - requested by taca
mail/squirrelmail: security update

Revisions pulled up:
- mail/squirrelmail/Makefile                                    1.134
- mail/squirrelmail/distinfo                                    1.70
- mail/squirrelmail/patches/patch-ai                            1.3

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Apr 30 07:56:55 UTC 2018

   Modified Files:
   	pkgsrc/mail/squirrelmail: Makefile distinfo
   	pkgsrc/mail/squirrelmail/patches: patch-ai

   Log Message:
   mail/squirrelmail: update to 1.4.23pre14764

   Fix CVE-2018-8741 and more.

     - Added ability (and user preference) to return to message list
       after moving a message
     - Search enhancement: Added ability to search in more than one
       header without having to search the body
     - Add ability for saved drafts to indicate if they are a reply and
       if so, to which message, and mark that message as replied when
       the draft is finally sent
     - Added option to allow returning to the message one had been
       replying to after sending
     - Sanitize user-supplied attachment filenames (thanks to Florian
       Grunow for reporting this issue) [CVE-2018-8741]
     - Allow users who cannot edit their email address but who have
       multiple identities to edit all their identities

   To generate a diff of this commit:
   cvs rdiff -u -r1.133 -r1.134 pkgsrc/mail/squirrelmail/Makefile
   cvs rdiff -u -r1.69 -r1.70 pkgsrc/mail/squirrelmail/distinfo
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/mail/squirrelmail/patches/patch-ai

Files:
RevisionActionfile
1.133.10.1modifypkgsrc/mail/squirrelmail/Makefile
1.69.10.1modifypkgsrc/mail/squirrelmail/distinfo
1.2.68.1modifypkgsrc/mail/squirrelmail/patches/patch-ai