Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
MIME-Version: 1.0
Date: Sat, 4 Jun 2016 19:39:34 +0000
From: "Benny Siegert" <bsiegert@netbsd.org>
Subject: CVS commit: [pkgsrc-2016Q1] pkgsrc/mail/roundcube
To: pkgsrc-changes@NetBSD.org
Reply-To: bsiegert@netbsd.org
Message-Id: <20160604193934.97C4FFBB5@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

Module Name:	pkgsrc
Committed By:	bsiegert
Date:		Sat Jun  4 19:39:34 UTC 2016

Modified Files:
	pkgsrc/mail/roundcube [pkgsrc-2016Q1]: Makefile distinfo
Added Files:
	pkgsrc/mail/roundcube/patches [pkgsrc-2016Q1]:
	    patch-plugins_password_helpers_passwd-expect
	    patch-program_lib_Roundcube_rcube__washtml.php
Removed Files:
	pkgsrc/mail/roundcube/patches [pkgsrc-2016Q1]: patch-config.inc.php

Log Message:
Pullup ticket #5033 - requested by taca
mail/roundcube: security fix

Revisions pulled up:
- mail/roundcube/Makefile                                       1.81-1.83
- mail/roundcube/PLIST                                          1.40-1.41
- mail/roundcube/distinfo                                       1.49-1.51
- mail/roundcube/patches/patch-config.inc.php                   deleted
- mail/roundcube/patches/patch-plugins_password_helpers_passwd-expect 1.1
- mail/roundcube/patches/patch-program_lib_Roundcube_rcube__washtml.php 1.3

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May 26 03:20:37 UTC 2016

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile PLIST distinfo
   Removed Files:
   	pkgsrc/mail/roundcube/patches: patch-config.inc.php

   Log Message:
   Update roundcube to 1.1.5, including security fix.

   RELEASE 1.1.5
   -------------
   - Plugin API: Add html2text hook
   - Plugin API: Added addressbook_export hook
   - Fix missing emoticons on html-to-text conversion
   - Fix random "access to this resource is secured against CSRF" message at logout (#4956)
   - Fix missing language name in "Add to Dictionary" request in HTML mode (#4951)
   - Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955)
   - Fix XSS issue in SVG images handling (#4949)
   - Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#4958)
   - Fix bug where Archive/Junk buttons were not active after page jump with select=all mode (#4961)
   - Fix bug in long recipients list parsing for cases where recipient name contained @-char (#4964)
   - Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9 (#4966)
   - Hide DSN option in Preferences when smtp_server is not used (#4967)
   - Protect download urls against CSRF using unique request tokens (#4957)
   - newmail_notifier: Refactor desktop notifications
   - Fix so contactlist_fields option can be set via config file
   - Fix so SPECIAL-USE assignments are forced only until user sets special folders (#4782)
   - Fix performance in reverting order of THREAD result
   - Fix converting mail addresses with @www. into mailto links (#5197)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May 26 03:23:39 UTC 2016

   Added Files:
   	pkgsrc/mail/roundcube/patches:
   	    patch-plugins_password_helpers_passwd-expect

   Log Message:
   Oops, forgot to add a patch file for NetBSD (and perhaps for *BSD) to
   make password plugin work.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu May 26 23:22:17 UTC 2016

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile distinfo
   Added Files:
   	pkgsrc/mail/roundcube/patches:
   	    patch-program_lib_Roundcube_rcube__washtml.php

   Log Message:
   Update security path for CVE-2016-5103 (XSS) from upstream.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun May 29 15:46:59 UTC 2016

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile PLIST distinfo

   Log Message:
   Switch to get distfiles from GitHub, noted by David Brownlee via private
   e-mail.

   And some installed files are changed, bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -u -r1.80 -r1.80.2.1 pkgsrc/mail/roundcube/Makefile
cvs rdiff -u -r1.48 -r1.48.4.1 pkgsrc/mail/roundcube/distinfo
cvs rdiff -u -r1.2 -r0 pkgsrc/mail/roundcube/patches/patch-config.inc.php
cvs rdiff -u -r0 -r1.1.2.2 \
    pkgsrc/mail/roundcube/patches/patch-plugins_password_helpers_passwd-expect
cvs rdiff -u -r0 -r1.3.2.2 \
    pkgsrc/mail/roundcube/patches/patch-program_lib_Roundcube_rcube__washtml.php

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.