Pullup ticket #3915 - requested by taca
mail/roundcube: security update

Revisions pulled up:
- mail/roundcube/MESSAGE                                        1.7
- mail/roundcube/Makefile                                      1.44-1.46
- mail/roundcube/PLIST                                          1.24
- mail/roundcube/distinfo                                      1.25

---
  Module Name: pkgsrc
  Committed By: fhajny
  Date: Wed Jul 25 11:24:21 UTC 2012

  Modified Files:
  pkgsrc/mail/roundcube: Makefile

  Log Message:
  Make package more portable by pre-creating destination for pax

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Aug 12 16:19:41 UTC 2012

  Modified Files:
  pkgsrc/mail/roundcube: MESSAGE Makefile

  Log Message:
  Some tweak in MESSAGE.

  * Note UPGRADING document which describes update process.
  * Remove note for older package.

  Bump PKGREVISION.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Tue Aug 21 15:26:32 UTC 2012

  Modified Files:
  pkgsrc/mail/roundcube: Makefile PLIST distinfo

  Log Message:
  Update roundcube to 0.8.1.

  Fixes two XSS issue.

  Here is quote from changelog of 0.8.1, please refer CHAGNGELOG file for
  full changes from 0.7.2.

  - Fix bug where domain name was converted to lower-case even with login_lc=false (#1488593)
  - Fix lower-casing email address on replies (#1488598)
  - Fix line separator in exported messages (#1488603)
  - Fix XSS issue where plain signatures wasn't secured in HTML mode (#1488613)
  - Fix XSS issue where href="javascript:" wasn't secured (#1488613)
  - Fix impossible to create message with empty plain text part (#1488610)
  - Fix stripped apostrophes when replying in plain text to HTML message (#1488606)
  - Fix inactive Save search option after advanced search (#1488607)
  - Fix Remove from group option is active for contact search result (#1488608)
  - Disable autocapitalization in login form on iPad/iPhone (#1488609)
  - Fix focus on the list when list row is clicked (#1488600)
  - Added separate From and To columns apart from smart From/To column (#1486891)
  - Fix fallback to Larry skin when configured skin isn't available (#1488591)
  - Fix (workaround) delete operations with some versions of memcache (#1488592)
  - Fix (disable) request validation for spell and spell_html actions

(tron)