Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2016-06-04 21:39:34 by Benny Siegert | Files touched by this commit (5) |
Log message:
Pullup ticket #5033 - requested by taca
mail/roundcube: security fix
Revisions pulled up:
- mail/roundcube/Makefile 1.81-1.83
- mail/roundcube/PLIST 1.40-1.41
- mail/roundcube/distinfo 1.49-1.51
- mail/roundcube/patches/patch-config.inc.php deleted
- mail/roundcube/patches/patch-plugins_password_helpers_passwd-expect 1.1
- mail/roundcube/patches/patch-program_lib_Roundcube_rcube__washtml.php 1.3
---
Module Name: pkgsrc
Committed By: taca
Date: Thu May 26 03:20:37 UTC 2016
Modified Files:
pkgsrc/mail/roundcube: Makefile PLIST distinfo
Removed Files:
pkgsrc/mail/roundcube/patches: patch-config.inc.php
Log message:
Update roundcube to 1.1.5, including security fix.
RELEASE 1.1.5
-------------
- Plugin API: Add html2text hook
- Plugin API: Added addressbook_export hook
- Fix missing emoticons on html-to-text conversion
- Fix random "access to this resource is secured against CSRF" \
message at logout (#4956)
- Fix missing language name in "Add to Dictionary" request in HTML \
mode (#4951)
- Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955)
- Fix XSS issue in SVG images handling (#4949)
- Fix (again) security issue in DBMail driver of password plugin \
[CVE-2015-2181] (#4958)
- Fix bug where Archive/Junk buttons were not active after page jump with \
select=all mode (#4961)
- Fix bug in long recipients list parsing for cases where recipient name \
contained @-char (#4964)
- Fix additional_message_headers plugin compatibility with Mail_Mime >= \
1.9 (#4966)
- Hide DSN option in Preferences when smtp_server is not used (#4967)
- Protect download urls against CSRF using unique request tokens (#4957)
- newmail_notifier: Refactor desktop notifications
- Fix so contactlist_fields option can be set via config file
- Fix so SPECIAL-USE assignments are forced only until user sets special \
folders (#4782)
- Fix performance in reverting order of THREAD result
- Fix converting mail addresses with @www. into mailto links (#5197)
---
Module Name: pkgsrc
Committed By: taca
Date: Thu May 26 03:23:39 UTC 2016
Added Files:
pkgsrc/mail/roundcube/patches:
patch-plugins_password_helpers_passwd-expect
Log message:
Oops, forgot to add a patch file for NetBSD (and perhaps for *BSD) to
make password plugin work.
---
Module Name: pkgsrc
Committed By: taca
Date: Thu May 26 23:22:17 UTC 2016
Modified Files:
pkgsrc/mail/roundcube: Makefile distinfo
Added Files:
pkgsrc/mail/roundcube/patches:
patch-program_lib_Roundcube_rcube__washtml.php
Log message:
Update security path for CVE-2016-5103 (XSS) from upstream.
Bump PKGREVISION.
---
Module Name: pkgsrc
Committed By: taca
Date: Sun May 29 15:46:59 UTC 2016
Modified Files:
pkgsrc/mail/roundcube: Makefile PLIST distinfo
Log message:
Switch to get distfiles from GitHub, noted by David Brownlee via private
e-mail.
And some installed files are changed, bump PKGREVISION.
|
Next | Query returned 1 messages, browsing 1 to 10 | previous