Path to this page:
Subject: CVS commit: pkgsrc/mail/roundcube
From: Takahiro Kambe
Date: 2016-05-26 05:20:37
Message id: 20160526032037.AF81CFBBA@cvs.NetBSD.org
Log Message:
Update roundcube to 1.1.5, including security fix.
RELEASE 1.1.5
-------------
- Plugin API: Add html2text hook
- Plugin API: Added addressbook_export hook
- Fix missing emoticons on html-to-text conversion
- Fix random "access to this resource is secured against CSRF" message \
at logout (#4956)
- Fix missing language name in "Add to Dictionary" request in HTML \
mode (#4951)
- Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955)
- Fix XSS issue in SVG images handling (#4949)
- Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] \
(#4958)
- Fix bug where Archive/Junk buttons were not active after page jump with \
select=all mode (#4961)
- Fix bug in long recipients list parsing for cases where recipient name \
contained @-char (#4964)
- Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9 \
(#4966)
- Hide DSN option in Preferences when smtp_server is not used (#4967)
- Protect download urls against CSRF using unique request tokens (#4957)
- newmail_notifier: Refactor desktop notifications
- Fix so contactlist_fields option can be set via config file
- Fix so SPECIAL-USE assignments are forced only until user sets special folders \
(#4782)
- Fix performance in reverting order of THREAD result
- Fix converting mail addresses with @www. into mailto links (#5197)
Files: