Received: by mail.netbsd.org (Postfix, from userid 605) id 68E7E84DCC; Sun, 12 Nov 2017 13:15:46 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id E747A84CFC for ; Sun, 12 Nov 2017 13:15:45 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id DMYOp_bpqVU0 for ; Sun, 12 Nov 2017 13:15:45 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 3365B84C2E for ; Sun, 12 Nov 2017 13:15:45 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 2E655FBDE; Sun, 12 Nov 2017 13:15:45 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1510492545221120" MIME-Version: 1.0 Date: Sun, 12 Nov 2017 13:15:45 +0000 From: "S.P.Zeidler" Subject: CVS commit: [pkgsrc-2017Q3] pkgsrc/mail To: pkgsrc-changes@NetBSD.org Reply-To: spz@netbsd.org X-Mailer: log_accum Message-Id: <20171112131545.2E655FBDE@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1510492545221120 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: spz Date: Sun Nov 12 13:15:45 UTC 2017 Modified Files: pkgsrc/mail/roundcube [pkgsrc-2017Q3]: Makefile.common distinfo pkgsrc/mail/roundcube-plugin-enigma [pkgsrc-2017Q3]: distinfo pkgsrc/mail/roundcube-plugin-password [pkgsrc-2017Q3]: distinfo pkgsrc/mail/roundcube-plugin-zipdownload [pkgsrc-2017Q3]: distinfo Log Message: Pullup ticket #5635 - requested by taca mail/roundcube: security update mail/roundcube-plugin-enigma: security update mail/roundcube-plugin-password: security update mail/roundcube-plugin-zipdownload: security update Revisions pulled up: - mail/roundcube-plugin-enigma/distinfo 1.7 - mail/roundcube-plugin-password/distinfo 1.7 - mail/roundcube-plugin-zipdownload/distinfo 1.7 - mail/roundcube/Makefile.common 1.7 - mail/roundcube/distinfo 1.58 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: taca Date: Thu Nov 9 01:13:12 UTC 2017 Modified Files: pkgsrc/mail/roundcube: Makefile.common distinfo pkgsrc/mail/roundcube-plugin-enigma: distinfo pkgsrc/mail/roundcube-plugin-password: distinfo pkgsrc/mail/roundcube-plugin-zipdownload: distinfo Log Message: mail/roundcube: update to 1.2.7 Security fix for CVE-2017-16651. RELEASE 1.2.7 ------------- - Fix rewind(): stream does not support seeking (#5950) - Fix bug where HTML messages could have been rendered empty on some systems (#5957) - Fix (again) bug where image data URIs in css style were treated as evil/remote in mail preview (#5580) - Managesieve: Fix parsing dot-staffed lines in multiline text (#5838, #5959) - Fix file disclosure vulnerability caused by insufficient input validation [CVE-2017-16651] (#6026) To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube/Makefile.common cvs rdiff -u -r1.57 -r1.58 pkgsrc/mail/roundcube/distinfo cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-enigma/distinfo cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-password/distinfo cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-zipdownload/distinfo To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.6.4.1 pkgsrc/mail/roundcube/Makefile.common cvs rdiff -u -r1.57 -r1.57.4.1 pkgsrc/mail/roundcube/distinfo cvs rdiff -u -r1.6 -r1.6.4.1 pkgsrc/mail/roundcube-plugin-enigma/distinfo cvs rdiff -u -r1.6 -r1.6.4.1 pkgsrc/mail/roundcube-plugin-password/distinfo cvs rdiff -u -r1.6 -r1.6.4.1 \ pkgsrc/mail/roundcube-plugin-zipdownload/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1510492545221120 Content-Disposition: inline Content-Length: 5704 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/mail/roundcube/Makefile.common diff -u pkgsrc/mail/roundcube/Makefile.common:1.6 pkgsrc/mail/roundcube/Makefile.common:1.6.4.1 --- pkgsrc/mail/roundcube/Makefile.common:1.6 Mon Sep 11 13:56:39 2017 +++ pkgsrc/mail/roundcube/Makefile.common Sun Nov 12 13:15:44 2017 @@ -1,4 +1,4 @@ -# $NetBSD: Makefile.common,v 1.6 2017/09/11 13:56:39 taca Exp $ +# $NetBSD: Makefile.common,v 1.6.4.1 2017/11/12 13:15:44 spz Exp $ # # used by mail/roundcube/Makefile # used by mail/roundcube/plugins.mk @@ -9,7 +9,7 @@ MASTER_SITES= ${MASTER_SITE_GITHUB:=roun GITHUB_PROJECT= roundcubemail HOMEPAGE= http://roundcube.net/ -RC_VERS= 1.2.6 +RC_VERS= 1.2.7 USE_LANGUAGES= # none USE_TOOLS+= pax Index: pkgsrc/mail/roundcube/distinfo diff -u pkgsrc/mail/roundcube/distinfo:1.57 pkgsrc/mail/roundcube/distinfo:1.57.4.1 --- pkgsrc/mail/roundcube/distinfo:1.57 Mon Sep 11 13:56:39 2017 +++ pkgsrc/mail/roundcube/distinfo Sun Nov 12 13:15:44 2017 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.57 2017/09/11 13:56:39 taca Exp $ +$NetBSD: distinfo,v 1.57.4.1 2017/11/12 13:15:44 spz Exp $ -SHA1 (roundcubemail-1.2.6.tar.gz) = 466191ae8eb779e45147a3bb0504b4549bef2944 -RMD160 (roundcubemail-1.2.6.tar.gz) = 75234503b8e3729a5c28af92128990f4428de2a8 -SHA512 (roundcubemail-1.2.6.tar.gz) = 6e6acc3311747d5c822711029bec0e97b32e17cf5bd55d3e26dc9f6fc7b67d15b940001c3b0f13aa674f9d5d477645438cc782f432d946ba031dd93bde2d852f -Size (roundcubemail-1.2.6.tar.gz) = 3538567 bytes +SHA1 (roundcubemail-1.2.7.tar.gz) = b5aa5303e0e940da2117802c7ffd22dc265c4699 +RMD160 (roundcubemail-1.2.7.tar.gz) = 7d24ca42391a62d494b0615e92203596f5573761 +SHA512 (roundcubemail-1.2.7.tar.gz) = ef8058e004a89cb83119972e7fd765920c7cfe8e5157c305b782cda1fead1a01335f5182b45930e409a070aadcf440635b9dc7c41df215d904cbaea0a0ed4191 +Size (roundcubemail-1.2.7.tar.gz) = 3539187 bytes SHA1 (patch-ac) = 235116580665d5d58edc218c063b41171a2d9227 SHA1 (patch-af) = 1f95a7005569207469563aa37ff48da0383b7668 SHA1 (patch-config_config.inc.php.sample) = 1c9751ba36394d592e7d3cdcc705010e0a4adda9 Index: pkgsrc/mail/roundcube-plugin-enigma/distinfo diff -u pkgsrc/mail/roundcube-plugin-enigma/distinfo:1.6 pkgsrc/mail/roundcube-plugin-enigma/distinfo:1.6.4.1 --- pkgsrc/mail/roundcube-plugin-enigma/distinfo:1.6 Mon Sep 11 13:57:24 2017 +++ pkgsrc/mail/roundcube-plugin-enigma/distinfo Sun Nov 12 13:15:44 2017 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.6 2017/09/11 13:57:24 taca Exp $ +$NetBSD: distinfo,v 1.6.4.1 2017/11/12 13:15:44 spz Exp $ -SHA1 (roundcubemail-1.2.6.tar.gz) = 466191ae8eb779e45147a3bb0504b4549bef2944 -RMD160 (roundcubemail-1.2.6.tar.gz) = 75234503b8e3729a5c28af92128990f4428de2a8 -SHA512 (roundcubemail-1.2.6.tar.gz) = 6e6acc3311747d5c822711029bec0e97b32e17cf5bd55d3e26dc9f6fc7b67d15b940001c3b0f13aa674f9d5d477645438cc782f432d946ba031dd93bde2d852f -Size (roundcubemail-1.2.6.tar.gz) = 3538567 bytes +SHA1 (roundcubemail-1.2.7.tar.gz) = b5aa5303e0e940da2117802c7ffd22dc265c4699 +RMD160 (roundcubemail-1.2.7.tar.gz) = 7d24ca42391a62d494b0615e92203596f5573761 +SHA512 (roundcubemail-1.2.7.tar.gz) = ef8058e004a89cb83119972e7fd765920c7cfe8e5157c305b782cda1fead1a01335f5182b45930e409a070aadcf440635b9dc7c41df215d904cbaea0a0ed4191 +Size (roundcubemail-1.2.7.tar.gz) = 3539187 bytes Index: pkgsrc/mail/roundcube-plugin-password/distinfo diff -u pkgsrc/mail/roundcube-plugin-password/distinfo:1.6 pkgsrc/mail/roundcube-plugin-password/distinfo:1.6.4.1 --- pkgsrc/mail/roundcube-plugin-password/distinfo:1.6 Mon Sep 11 14:00:23 2017 +++ pkgsrc/mail/roundcube-plugin-password/distinfo Sun Nov 12 13:15:44 2017 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.6 2017/09/11 14:00:23 taca Exp $ +$NetBSD: distinfo,v 1.6.4.1 2017/11/12 13:15:44 spz Exp $ -SHA1 (roundcubemail-1.2.6.tar.gz) = 466191ae8eb779e45147a3bb0504b4549bef2944 -RMD160 (roundcubemail-1.2.6.tar.gz) = 75234503b8e3729a5c28af92128990f4428de2a8 -SHA512 (roundcubemail-1.2.6.tar.gz) = 6e6acc3311747d5c822711029bec0e97b32e17cf5bd55d3e26dc9f6fc7b67d15b940001c3b0f13aa674f9d5d477645438cc782f432d946ba031dd93bde2d852f -Size (roundcubemail-1.2.6.tar.gz) = 3538567 bytes +SHA1 (roundcubemail-1.2.7.tar.gz) = b5aa5303e0e940da2117802c7ffd22dc265c4699 +RMD160 (roundcubemail-1.2.7.tar.gz) = 7d24ca42391a62d494b0615e92203596f5573761 +SHA512 (roundcubemail-1.2.7.tar.gz) = ef8058e004a89cb83119972e7fd765920c7cfe8e5157c305b782cda1fead1a01335f5182b45930e409a070aadcf440635b9dc7c41df215d904cbaea0a0ed4191 +Size (roundcubemail-1.2.7.tar.gz) = 3539187 bytes Index: pkgsrc/mail/roundcube-plugin-zipdownload/distinfo diff -u pkgsrc/mail/roundcube-plugin-zipdownload/distinfo:1.6 pkgsrc/mail/roundcube-plugin-zipdownload/distinfo:1.6.4.1 --- pkgsrc/mail/roundcube-plugin-zipdownload/distinfo:1.6 Mon Sep 11 14:01:02 2017 +++ pkgsrc/mail/roundcube-plugin-zipdownload/distinfo Sun Nov 12 13:15:44 2017 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.6 2017/09/11 14:01:02 taca Exp $ +$NetBSD: distinfo,v 1.6.4.1 2017/11/12 13:15:44 spz Exp $ -SHA1 (roundcubemail-1.2.6.tar.gz) = 466191ae8eb779e45147a3bb0504b4549bef2944 -RMD160 (roundcubemail-1.2.6.tar.gz) = 75234503b8e3729a5c28af92128990f4428de2a8 -SHA512 (roundcubemail-1.2.6.tar.gz) = 6e6acc3311747d5c822711029bec0e97b32e17cf5bd55d3e26dc9f6fc7b67d15b940001c3b0f13aa674f9d5d477645438cc782f432d946ba031dd93bde2d852f -Size (roundcubemail-1.2.6.tar.gz) = 3538567 bytes +SHA1 (roundcubemail-1.2.7.tar.gz) = b5aa5303e0e940da2117802c7ffd22dc265c4699 +RMD160 (roundcubemail-1.2.7.tar.gz) = 7d24ca42391a62d494b0615e92203596f5573761 +SHA512 (roundcubemail-1.2.7.tar.gz) = ef8058e004a89cb83119972e7fd765920c7cfe8e5157c305b782cda1fead1a01335f5182b45930e409a070aadcf440635b9dc7c41df215d904cbaea0a0ed4191 +Size (roundcubemail-1.2.7.tar.gz) = 3539187 bytes --_----------=_1510492545221120--