CVS commit: [pkgsrc-2016Q1] pkgsrc/mail/roundcube

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sat Jun  4 19:39:34 UTC 2016

Modified Files:
        pkgsrc/mail/roundcube [pkgsrc-2016Q1]: Makefile distinfo
Added Files:
        pkgsrc/mail/roundcube/patches [pkgsrc-2016Q1]:
            patch-plugins_password_helpers_passwd-expect
            patch-program_lib_Roundcube_rcube__washtml.php
Removed Files:
        pkgsrc/mail/roundcube/patches [pkgsrc-2016Q1]: patch-config.inc.php

Log Message:
Pullup ticket #5033 - requested by taca
mail/roundcube: security fix

Revisions pulled up:
- mail/roundcube/Makefile                                       1.81-1.83
- mail/roundcube/PLIST                                          1.40-1.41
- mail/roundcube/distinfo                                       1.49-1.51
- mail/roundcube/patches/patch-config.inc.php                   deleted
- mail/roundcube/patches/patch-plugins_password_helpers_passwd-expect 1.1
- mail/roundcube/patches/patch-program_lib_Roundcube_rcube__washtml.php 1.3

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu May 26 03:20:37 UTC 2016

   Modified Files:
        pkgsrc/mail/roundcube: Makefile PLIST distinfo
   Removed Files:
        pkgsrc/mail/roundcube/patches: patch-config.inc.php

   Log Message:
   Update roundcube to 1.1.5, including security fix.

   RELEASE 1.1.5
   -------------
   - Plugin API: Add html2text hook
   - Plugin API: Added addressbook_export hook
   - Fix missing emoticons on html-to-text conversion
   - Fix random "access to this resource is secured against CSRF" message at logout (#4956)
   - Fix missing language name in "Add to Dictionary" request in HTML mode (#4951)
   - Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955)
   - Fix XSS issue in SVG images handling (#4949)
   - Fix (again) security issue in DBMail driver of password plugin [CVE-2015-2181] (#4958)
   - Fix bug where Archive/Junk buttons were not active after page jump with select=all mode (#4961)
   - Fix bug in long recipients list parsing for cases where recipient name contained @-char (#4964)
   - Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9 (#4966)
   - Hide DSN option in Preferences when smtp_server is not used (#4967)
   - Protect download urls against CSRF using unique request tokens (#4957)
   - newmail_notifier: Refactor desktop notifications
   - Fix so contactlist_fields option can be set via config file
   - Fix so SPECIAL-USE assignments are forced only until user sets special folders (#4782)
   - Fix performance in reverting order of THREAD result
   - Fix converting mail addresses with @www. into mailto links (#5197)

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu May 26 03:23:39 UTC 2016

   Added Files:
        pkgsrc/mail/roundcube/patches:
            patch-plugins_password_helpers_passwd-expect

   Log Message:
   Oops, forgot to add a patch file for NetBSD (and perhaps for *BSD) to
   make password plugin work.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu May 26 23:22:17 UTC 2016

   Modified Files:
        pkgsrc/mail/roundcube: Makefile distinfo
   Added Files:
        pkgsrc/mail/roundcube/patches:
            patch-program_lib_Roundcube_rcube__washtml.php

   Log Message:
   Update security path for CVE-2016-5103 (XSS) from upstream.

   Bump PKGREVISION.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun May 29 15:46:59 UTC 2016

   Modified Files:
        pkgsrc/mail/roundcube: Makefile PLIST distinfo

   Log Message:
   Switch to get distfiles from GitHub, noted by David Brownlee via private
   e-mail.

   And some installed files are changed, bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -u -r1.80 -r1.80.2.1 pkgsrc/mail/roundcube/Makefile
cvs rdiff -u -r1.48 -r1.48.4.1 pkgsrc/mail/roundcube/distinfo
cvs rdiff -u -r1.2 -r0 pkgsrc/mail/roundcube/patches/patch-config.inc.php
cvs rdiff -u -r0 -r1.1.2.2 \
    pkgsrc/mail/roundcube/patches/patch-plugins_password_helpers_passwd-expect
cvs rdiff -u -r0 -r1.3.2.2 \
    pkgsrc/mail/roundcube/patches/patch-program_lib_Roundcube_rcube__washtml.php

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.