Pullup ticket #6185 - requested by taca
mail/roundcube: security fix

Revisions pulled up:
- mail/roundcube-plugin-password/Makefile                       1.9
- mail/roundcube-plugin-password/distinfo                       1.17
- mail/roundcube/Makefile.common                                1.17
- mail/roundcube/PLIST                                          1.48
- mail/roundcube/distinfo                                       1.68

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Apr 30 07:09:34 UTC 2020

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile.common PLIST distinfo

   Log Message:
   mail/roundcube: update to 1.4.4

   Update roundcube, roundcube-plugin-enigma and roundcube-plugin-zipdownload to
   1.4.4.  This includes security fixes..

   RELEASE 1.4.4
   -------------
   - Fix bug where attachments with Content-Id were attached to the message on reply (#7122)
   - Fix identity selection on reply when both sender and recipient addresses are included in identities (#7211)
   - Elastic: Fix text selection with Shift+PageUp and Shift+PageDown in plain text editor when using Chrome (#7230)
   - Elastic: Fix recipient input bug when using click to select a contact from autocomplete list (#7231)
   - Elastic: Fix color of a folder with recent messages (#7281)
   - Elastic: Restrict logo size in print view (#7275)
   - Fix invalid Content-Type for messages with only html part and inline images - Mail_Mime-1.10.7 (#7261)
   - Fix missing contact display name in QR Code data (#7257)
   - Fix so button label in Select image/media dialogs is "Close" not "Cancel" (#7246)
   - Fix regression in testing database schema on MSSQL (#7227)
   - Fix cursor position after inserting a group to a recipient input using autocompletion (#7267)
   - Fix string literals handling in IMAP STATUS (and various other) responses (#7290)
   - Fix bug where multiple images in a message were replaced by the first one on forward/reply/edit (#7293)
   - Fix handling keyservers configured with protocol prefix (#7295)
   - Markasjunk: Fix marking as spam/ham on moving messages with Move menu (#7189)
   - Markasjunk: Fix bug where moving to Junk was failing on messages selected with Select > All (#7206)
   - Fix so imap error message is displayed to the user on folder create/update (#7245)
   - Fix bug where a special folder couldn't be created if a special-use flag is not supported (#7147)
   - Mailvelope: Fix bug where recipients with name were not handled properly in mail compose (#7312)
   - Fix characters encoding in group rename input after group creation/rename (#7330)
   - Fix bug where some message/rfc822 parts could not be attached on forward (#7323)
   - Make install-jsdeps.sh script working without the 'file' program installed (#7325)
   - Fix performance issue of parsing big HTML messages by disabling HTML5 parser for these (#7331)
   - Fix so Print button for PDF attachments works on Firefox >= 75 (#5125)
   - Security: Fix XSS issue in handling of CDATA in HTML messages
   - Security: Fix remote code execution via crafted 'im_convert_path' or 'im_identify_path' settings
   - Security: Fix local file inclusion (and code execution) via crafted 'plugins' option
   - Security: Fix CSRF bypass that could be used to log out an authenticated user (#7302)

   RELEASE 1.4.3
   -------------
   - Enigma: Fix so key list selection is reset when opening key creation form (#7154)
   - Enigma: Fix so using list checkbox selection does not load the key preview frame
   - Enigma: Fix generation of key pairs for identities with IDN domains (#7181)
   - Enigma: Display IDN domains of key users and identities in UTF8
   - Enigma: Fix bug where "Send unencrypted" button didn't work in Elastic skin (#7205)
   - Managesieve: Fix bug where it wasn't possible to save flag actions (#7188)
   - Markasjunk: Fix bug where marking as spam/ham didn't work on moving messages with drag-and-drop (#7137)
   - Elastic: Fix disappearing sidebar in mail compose after clicking Mail button
   - Elastic: Fix incorrect aria-disabled attribute on Mail taskmenu button in mail compose
   - Elastic: Fix bug where it was possible to switch editor mode when 'htmleditor' was in 'dont_override' (#7143)
   - Elastic: Fix text selection in recipient inputs (#7129)
   - Elastic: Fix missing Close button in "more recipients" dialog
   - Elastic: Fix non-working folder subscription checkbox for newly added folders (#7174)
   - Fix regression where "Open in new window" action didn't work (#7155)
   - Fix PHP Warning: array_filter() expects parameter 1 to be array, null given in subscriptions_option plugin (#7165)
   - Fix unexpected error message when mail refresh involves folder auto-unsubscribe (#6923)
   - Fix recipient duplicates in print-view when the recipient list has been expanded (#7169)
   - Fix bug where files in skins/ directory were listed on skins list (#7180)
   - Fix bug where message parts with no Content-Disposition header and no name were not listed on attachments list (#7117)
   - Fix display issues with mail subject that contains line-breaks (#7191)
   - Fix invalid Content-Transfer-Encoding on multipart messages - Mail_Mime fix (#7170)
   - Fix regression where using an absolute path to SQLite database file on Windows didn't work (#7196)
   - Fix using unix:///path/to/socket.file in memcached driver (#7210)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Apr 30 07:11:16 UTC 2020

   Modified Files:
   	pkgsrc/mail/roundcube-plugin-password: Makefile distinfo

   Log Message:
   mail/roundcube-plugin-password: update to 1.4.4

   Update roundcube-plugin-password to 1.4.4.

   pkgsrc change: add dependecy to lang/tcl-expect.

   RELEASE 1.4.3
   -------------
   - Password: Make chpass-wrapper.py Python 3 compatible (#7135)


(bsiegert)