Pullup ticket #5033 - requested by taca
mail/roundcube: security fix

Revisions pulled up:
- mail/roundcube/Makefile                                      1.81-1.83
- mail/roundcube/PLIST                                          1.40-1.41
- mail/roundcube/distinfo                                      1.49-1.51
- mail/roundcube/patches/patch-config.inc.php                  deleted
- mail/roundcube/patches/patch-plugins_password_helpers_passwd-expect 1.1
- mail/roundcube/patches/patch-program_lib_Roundcube_rcube__washtml.php 1.3

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu May 26 03:20:37 UTC 2016

  Modified Files:
  pkgsrc/mail/roundcube: Makefile PLIST distinfo
  Removed Files:
  pkgsrc/mail/roundcube/patches: patch-config.inc.php

  Log Message:
  Update roundcube to 1.1.5, including security fix.

  RELEASE 1.1.5
  -------------
  - Plugin API: Add html2text hook
  - Plugin API: Added addressbook_export hook
  - Fix missing emoticons on html-to-text conversion
  - Fix random "access to this resource is secured against CSRF" message at logout (#4956)
  - Fix missing language name in "Add to Dictionary" request in HTML mode (#4951)
  - Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955)
  - Fix XSS issue in SVG images handling (#4949)
  - Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#4958)
  - Fix bug where Archive/Junk buttons were not active after page jump with select=all mode (#4961)
  - Fix bug in long recipients list parsing for cases where recipient name contained @-char (#4964)
  - Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9 (#4966)
  - Hide DSN option in Preferences when smtp_server is not used (#4967)
  - Protect download urls against CSRF using unique request tokens (#4957)
  - newmail_notifier: Refactor desktop notifications
  - Fix so contactlist_fields option can be set via config file
  - Fix so SPECIAL-USE assignments are forced only until user sets special folders (#4782)
  - Fix performance in reverting order of THREAD result
  - Fix converting mail addresses with @www. into mailto links (#5197)

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu May 26 03:23:39 UTC 2016

  Added Files:
  pkgsrc/mail/roundcube/patches:
      patch-plugins_password_helpers_passwd-expect

  Log Message:
  Oops, forgot to add a patch file for NetBSD (and perhaps for *BSD) to
  make password plugin work.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu May 26 23:22:17 UTC 2016

  Modified Files:
  pkgsrc/mail/roundcube: Makefile distinfo
  Added Files:
  pkgsrc/mail/roundcube/patches:
      patch-program_lib_Roundcube_rcube__washtml.php

  Log Message:
  Update security path for CVE-2016-5103 (XSS) from upstream.

  Bump PKGREVISION.

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun May 29 15:46:59 UTC 2016

  Modified Files:
  pkgsrc/mail/roundcube: Makefile PLIST distinfo

  Log Message:
  Switch to get distfiles from GitHub, noted by David Brownlee via private
  e-mail.

  And some installed files are changed, bump PKGREVISION.

(bsiegert)