---
- branch: MAIN
  date: Wed Jun 21 15:07:03 UTC 2017
  files:
  - new: '1.133'
    old: '1.132'
    path: pkgsrc/mail/squirrelmail/Makefile
    pathrev: pkgsrc/mail/squirrelmail/Makefile@1.133
    type: modified
  - new: '1.41'
    old: '1.40'
    path: pkgsrc/mail/squirrelmail/PLIST
    pathrev: pkgsrc/mail/squirrelmail/PLIST@1.41
    type: modified
  - new: '1.69'
    old: '1.68'
    path: pkgsrc/mail/squirrelmail/distinfo
    pathrev: pkgsrc/mail/squirrelmail/distinfo@1.69
    type: modified
  - new: '0'
    old: '1.1'
    path: pkgsrc/mail/squirrelmail/patches/patch-class_deliver_Deliver__SendMail.class.php
    pathrev: pkgsrc/mail/squirrelmail/patches/patch-class_deliver_Deliver__SendMail.class.php@0
    type: deleted
  id: 20170621T150703Z.ade2ae4e0a0da6e5f6bffe7677463265f5b89d8f
  log: |
    Update squirrelmail to 1.4.23pre14688.

    Note: CVE-2017-7692 is already fixed by 1.4.23pre14605nb1.

     - compose_send hook now has $draft flag in hook arguments
     - Fixed insufficient sendmail command argument escaping (thanks
       to Mitchel Sahertian, Beyond Security/Dawid Golunski and Filippo
       Cavallarin for bringing this to our attention). [CVE-2017-7692]
     - Upgraded preferences for the delete_move_next plugin.  Automatic
       user preference updates are included, but note that if your
       installation is new, or all user prefs have been converted from
       "on"/"off" to 0/1 then you can add the following to SquirrelMail's
       config/config_local.php to avoid convertign legacy values over and over:
          $do_not_convert_delete_move_next_legacy_preferences = TRUE;
     - Added ability to control the display of the "Check Spelling"
       button provided by the squirrelspell plugin, which allows
       administrators to offer this plugin but keep it out of the way
       for users who do not want it. Put sqspell_show_button=0 in
       default preferences if it should be hidden by default
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/mail/squirrelmail'
  unixtime: '1498057623'
  user: taca