MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
Date: Tue, 4 Sep 2012 20:30:26 +0000
From: "Matthias Scheler" <tron@netbsd.org>
Subject: CVS commit: [pkgsrc-2012Q2] pkgsrc/mail/roundcube
To: pkgsrc-changes@NetBSD.org
Reply-To: tron@netbsd.org
Message-Id: <20120904203026.7E064175DD@cvs.netbsd.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

Module Name:	pkgsrc
Committed By:	tron
Date:		Tue Sep  4 20:30:26 UTC 2012

Modified Files:
	pkgsrc/mail/roundcube [pkgsrc-2012Q2]: MESSAGE Makefile PLIST distinfo

Log Message:
Pullup ticket #3915 - requested by taca
mail/roundcube: security update

Revisions pulled up:
- mail/roundcube/MESSAGE                                        1.7
- mail/roundcube/Makefile                                       1.44-1.46
- mail/roundcube/PLIST                                          1.24
- mail/roundcube/distinfo                                       1.25

---
   Module Name:	pkgsrc
   Committed By:	fhajny
   Date:		Wed Jul 25 11:24:21 UTC 2012

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile

   Log Message:
   Make package more portable by pre-creating destination for pax

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 16:19:41 UTC 2012

   Modified Files:
   	pkgsrc/mail/roundcube: MESSAGE Makefile

   Log Message:
   Some tweak in MESSAGE.

   * Note UPGRADING document which describes update process.
   * Remove note for older package.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Aug 21 15:26:32 UTC 2012

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile PLIST distinfo

   Log Message:
   Update roundcube to 0.8.1.

   Fixes two XSS issue.

   Here is quote from changelog of 0.8.1, please refer CHAGNGELOG file for
   full changes from 0.7.2.

   - Fix bug where domain name was converted to lower-case even with login_lc=false (#1488593)
   - Fix lower-casing email address on replies (#1488598)
   - Fix line separator in exported messages (#1488603)
   - Fix XSS issue where plain signatures wasn't secured in HTML mode (#1488613)
   - Fix XSS issue where href="javascript:" wasn't secured (#1488613)
   - Fix impossible to create message with empty plain text part (#1488610)
   - Fix stripped apostrophes when replying in plain text to HTML message (#1488606)
   - Fix inactive Save search option after advanced search (#1488607)
   - Fix Remove from group option is active for contact search result (#1488608)
   - Disable autocapitalization in login form on iPad/iPhone (#1488609)
   - Fix focus on the list when list row is clicked (#1488600)
   - Added separate From and To columns apart from smart From/To column (#1486891)
   - Fix fallback to Larry skin when configured skin isn't available (#1488591)
   - Fix (workaround) delete operations with some versions of memcache (#1488592)
   - Fix (disable) request validation for spell and spell_html actions


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.6.34.1 pkgsrc/mail/roundcube/MESSAGE
cvs rdiff -u -r1.43 -r1.43.2.1 pkgsrc/mail/roundcube/Makefile
cvs rdiff -u -r1.23 -r1.23.2.1 pkgsrc/mail/roundcube/PLIST
cvs rdiff -u -r1.24 -r1.24.4.1 pkgsrc/mail/roundcube/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.