Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66]) by www.NetBSD.org (Postfix) with ESMTP id 0160C63B85F for ; Tue, 21 Aug 2012 15:26:36 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id 04B9714A2F2; Tue, 21 Aug 2012 15:26:36 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id B9D8514A2EC for ; Tue, 21 Aug 2012 15:26:33 +0000 (UTC) X-Virus-Scanned: amavisd-new at NetBSD.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id d1GoHBbcIJjE for ; Tue, 21 Aug 2012 15:26:33 +0000 (UTC) Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd]) by mail.netbsd.org (Postfix) with ESMTP id EEC8614A2E8 for ; Tue, 21 Aug 2012 15:26:32 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id C7FDB175DD; Tue, 21 Aug 2012 15:26:32 +0000 (UTC) MIME-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Date: Tue, 21 Aug 2012 15:26:32 +0000 From: "Takahiro Kambe" Subject: CVS commit: pkgsrc/mail/roundcube To: pkgsrc-changes@NetBSD.org Reply-To: taca@netbsd.org X-Mailer: log_accum Message-Id: <20120821152632.C7FDB175DD@cvs.netbsd.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk Module Name: pkgsrc Committed By: taca Date: Tue Aug 21 15:26:32 UTC 2012 Modified Files: pkgsrc/mail/roundcube: Makefile PLIST distinfo Log Message: Update roundcube to 0.8.1. Fixes two XSS issue. Here is quote from changelog of 0.8.1, please refer CHAGNGELOG file for full changes from 0.7.2. - Fix bug where domain name was converted to lower-case even with login_lc=false (#1488593) - Fix lower-casing email address on replies (#1488598) - Fix line separator in exported messages (#1488603) - Fix XSS issue where plain signatures wasn't secured in HTML mode (#1488613) - Fix XSS issue where href="javascript:" wasn't secured (#1488613) - Fix impossible to create message with empty plain text part (#1488610) - Fix stripped apostrophes when replying in plain text to HTML message (#1488606) - Fix inactive Save search option after advanced search (#1488607) - Fix Remove from group option is active for contact search result (#1488608) - Disable autocapitalization in login form on iPad/iPhone (#1488609) - Fix focus on the list when list row is clicked (#1488600) - Added separate From and To columns apart from smart From/To column (#1486891) - Fix fallback to Larry skin when configured skin isn't available (#1488591) - Fix (workaround) delete operations with some versions of memcache (#1488592) - Fix (disable) request validation for spell and spell_html actions To generate a diff of this commit: cvs rdiff -u -r1.45 -r1.46 pkgsrc/mail/roundcube/Makefile cvs rdiff -u -r1.23 -r1.24 pkgsrc/mail/roundcube/PLIST cvs rdiff -u -r1.24 -r1.25 pkgsrc/mail/roundcube/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.