Received: by mail.netbsd.org (Postfix, from userid 605) id D794C84DE6; Mon, 10 Aug 2020 22:30:42 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 5E42584D96 for ; Mon, 10 Aug 2020 22:30:42 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 2ENM7Ihy1Ahj for ; Mon, 10 Aug 2020 22:30:41 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 909B984CE8 for ; Mon, 10 Aug 2020 22:30:41 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 8A20AFB28; Mon, 10 Aug 2020 22:30:41 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1597098641293240" MIME-Version: 1.0 Date: Mon, 10 Aug 2020 22:30:41 +0000 From: "Takahiro Kambe" Subject: CVS commit: pkgsrc/mail To: pkgsrc-changes@NetBSD.org Reply-To: taca@netbsd.org X-Mailer: log_accum Message-Id: <20200810223041.8A20AFB28@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1597098641293240 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: taca Date: Mon Aug 10 22:30:41 UTC 2020 Modified Files: pkgsrc/mail/roundcube: Makefile.common distinfo pkgsrc/mail/roundcube-plugin-password: distinfo Log Message: mail/roundcube: update to 1.4.8 Update roundcube to 1.4.8, security release. RELEASE 1.4.8 ------------- - Security: Fix potential XSS issue in HTML editor of the identity signature input (#7507) - Managesieve: Fix too-small input field in Elastic when using custom headers (#7498) - Fix support for an error as a string in message_before_send hook (#7475) - Elastic: Fix redundant scrollbar in plain text editor on mail reply (#7500) - Elastic: Fix deleted and replied+forwarded icons on messages list (#7503) - Managesieve: Allow angle brackets in out-of-office message body (#7518) - Fix bug in conversion of email addresses to mailto links in plain text messages (#7526) - Fix format=flowed formatting on plain text part derived from the HTML content (#7504) - Fix incorrect rewriting of internal links in HTML content (#7512) - Fix handling links without defined protocol (#7454) - Fix paging of search results on IMAP servers with no SORT capability (#7462) - Fix detecting special folders on servers with both SPECIAL-USE and LIST-STATUS (#7525) - Security: Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145] - Security: Fix cross-site scripting (XSS) via HTML messages with malicious math content To generate a diff of this commit: cvs rdiff -u -r1.20 -r1.21 pkgsrc/mail/roundcube/Makefile.common cvs rdiff -u -r1.71 -r1.72 pkgsrc/mail/roundcube/distinfo cvs rdiff -u -r1.20 -r1.21 pkgsrc/mail/roundcube-plugin-password/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1597098641293240 Content-Disposition: inline Content-Length: 3528 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/mail/roundcube/Makefile.common diff -u pkgsrc/mail/roundcube/Makefile.common:1.20 pkgsrc/mail/roundcube/Makefile.common:1.21 --- pkgsrc/mail/roundcube/Makefile.common:1.20 Tue Jul 7 04:37:26 2020 +++ pkgsrc/mail/roundcube/Makefile.common Mon Aug 10 22:30:41 2020 @@ -1,4 +1,4 @@ -# $NetBSD: Makefile.common,v 1.20 2020/07/07 04:37:26 taca Exp $ +# $NetBSD: Makefile.common,v 1.21 2020/08/10 22:30:41 taca Exp $ # # used by mail/roundcube/Makefile # used by mail/roundcube/plugins.mk @@ -10,7 +10,7 @@ GITHUB_PROJECT= roundcubemail GITHUB_RELEASE= ${RC_VERS} HOMEPAGE= https://roundcube.net/ -RC_VERS= 1.4.7 +RC_VERS= 1.4.8 USE_LANGUAGES= # none USE_TOOLS+= pax Index: pkgsrc/mail/roundcube/distinfo diff -u pkgsrc/mail/roundcube/distinfo:1.71 pkgsrc/mail/roundcube/distinfo:1.72 --- pkgsrc/mail/roundcube/distinfo:1.71 Tue Jul 7 04:37:26 2020 +++ pkgsrc/mail/roundcube/distinfo Mon Aug 10 22:30:41 2020 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.71 2020/07/07 04:37:26 taca Exp $ +$NetBSD: distinfo,v 1.72 2020/08/10 22:30:41 taca Exp $ -SHA1 (roundcubemail-1.4.7-complete.tar.gz) = 49f194d25ac7b9bf175bd52285bb61cde7baed44 -RMD160 (roundcubemail-1.4.7-complete.tar.gz) = bae742e12b0df75776ceb91c482eaffe0fd512d7 -SHA512 (roundcubemail-1.4.7-complete.tar.gz) = d668075c1fb1ac48931a82ca67b4ebeed6f1d1e82a336901f79967cb2eb91979fc7bb46d4895558f8e64f89f963002efc7c1ad23b93c52a252ce1a7aa04b678a -Size (roundcubemail-1.4.7-complete.tar.gz) = 7031947 bytes +SHA1 (roundcubemail-1.4.8-complete.tar.gz) = 3a6824fd68fef2e0d24f186cfbee5c6f9d6edbe9 +RMD160 (roundcubemail-1.4.8-complete.tar.gz) = eacf740aab6fa69fd023bc5f2356b49a81e596d0 +SHA512 (roundcubemail-1.4.8-complete.tar.gz) = 8b7734cdec95954b7e18a0e44957da6ef74b5b0c3d28a1449e8634faa230844f5e0c28954245641758f8b2d9102aa32f279765ed3dfa20fa7b00dee4e5347362 +Size (roundcubemail-1.4.8-complete.tar.gz) = 7032822 bytes SHA1 (patch-af) = 7f29b0310a2a6b2e71858787e08b025e30d8bd12 SHA1 (patch-config_config.inc.php.sample) = 92a48a97b16fe3f5f4b9441fce762a559d8daca7 SHA1 (patch-program_lib_Roundcube_rcube__mime.php) = b1e9479d575b7fd61c413e2b76ee36c06ece7a5c Index: pkgsrc/mail/roundcube-plugin-password/distinfo diff -u pkgsrc/mail/roundcube-plugin-password/distinfo:1.20 pkgsrc/mail/roundcube-plugin-password/distinfo:1.21 --- pkgsrc/mail/roundcube-plugin-password/distinfo:1.20 Tue Jul 7 04:37:26 2020 +++ pkgsrc/mail/roundcube-plugin-password/distinfo Mon Aug 10 22:30:41 2020 @@ -1,7 +1,7 @@ -$NetBSD: distinfo,v 1.20 2020/07/07 04:37:26 taca Exp $ +$NetBSD: distinfo,v 1.21 2020/08/10 22:30:41 taca Exp $ -SHA1 (roundcubemail-1.4.7-complete.tar.gz) = 49f194d25ac7b9bf175bd52285bb61cde7baed44 -RMD160 (roundcubemail-1.4.7-complete.tar.gz) = bae742e12b0df75776ceb91c482eaffe0fd512d7 -SHA512 (roundcubemail-1.4.7-complete.tar.gz) = d668075c1fb1ac48931a82ca67b4ebeed6f1d1e82a336901f79967cb2eb91979fc7bb46d4895558f8e64f89f963002efc7c1ad23b93c52a252ce1a7aa04b678a -Size (roundcubemail-1.4.7-complete.tar.gz) = 7031947 bytes +SHA1 (roundcubemail-1.4.8-complete.tar.gz) = 3a6824fd68fef2e0d24f186cfbee5c6f9d6edbe9 +RMD160 (roundcubemail-1.4.8-complete.tar.gz) = eacf740aab6fa69fd023bc5f2356b49a81e596d0 +SHA512 (roundcubemail-1.4.8-complete.tar.gz) = 8b7734cdec95954b7e18a0e44957da6ef74b5b0c3d28a1449e8634faa230844f5e0c28954245641758f8b2d9102aa32f279765ed3dfa20fa7b00dee4e5347362 +Size (roundcubemail-1.4.8-complete.tar.gz) = 7032822 bytes SHA1 (patch-plugins_password_helpers_passwd-expect) = 15e427a3c90bf7c0437a023b3f099abb5a139165 --_----------=_1597098641293240--