[pkgsrc/pkgsrc-2018Q3]: pkgsrc/mail/roundcube Pullup ticket #5875 - requested...

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b406ba61cd82
branches:  pkgsrc-2018Q3
changeset: 314824:b406ba61cd82
user:      spz <spz%pkgsrc.org@localhost>
date:      Fri Nov 09 18:39:00 2018 +0000

description:
Pullup ticket #5875 - requested by taca
mail/roundcube: security update

Revisions pulled up:
- mail/roundcube/Makefile.common                                1.12
- mail/roundcube/distinfo                                       1.63

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun Oct 28 15:23:34 UTC 2018

   Modified Files:
        pkgsrc/mail/roundcube: Makefile.common distinfo

   Log Message:
   mail/roundcube: update to 1.3.8

   This update includes XSS security problem.

   RELEASE 1.3.8
   -------------

   - Fix PHP warnings on dummy QUOTA responses in Courier-IMAP 4.17.1 (#6374)
   - Fix so fallback from BINARY to BODY FETCH is used also on [PARSE] errors in dovecot 2.3 (#6383)
   - Fix invalid regular expressions that throw warnings on PHP 7.3 (#6398)
   - Fix so Classic skin splitter does not escape out of window (#6397)
   - Fix XSS issue in handling invalid style tag content (#6410)
   - Fix compatibility with MySQL 8 - error on 'system' table use
   - Managesieve: Fix bug where show_real_foldernames setting wasn't respected (#6422)
   - New_user_identity: Fix %fu/%u vars substitution in user specific LDAP params (#6419)
   - Fix support for "allow-from <uri>" in "x_frame_options" config option (#6449)
   - Fix bug where valid content between HTML comments could have been skipped in some cases (#6464)
   - Fix multiple VCard field search (#6466)
   - Fix session issue on long running requests (#6470)


   To generate a diff of this commit:
   cvs rdiff -u -r1.11 -r1.12 pkgsrc/mail/roundcube/Makefile.common
   cvs rdiff -u -r1.62 -r1.63 pkgsrc/mail/roundcube/distinfo

diffstat:

 mail/roundcube/Makefile.common |   5 +++--
 mail/roundcube/distinfo        |  10 +++++-----
 2 files changed, 8 insertions(+), 7 deletions(-)

diffs (46 lines):

diff -r da61563a9708 -r b406ba61cd82 mail/roundcube/Makefile.common
--- a/mail/roundcube/Makefile.common    Sun Nov 04 20:03:36 2018 +0000
+++ b/mail/roundcube/Makefile.common    Fri Nov 09 18:39:00 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.11 2018/08/09 15:03:56 taca Exp $
+# $NetBSD: Makefile.common,v 1.11.2.1 2018/11/09 18:39:00 spz Exp $
 #
 # used by mail/roundcube/Makefile
 # used by mail/roundcube/plugins.mk
@@ -11,10 +11,11 @@
 DISTFILES+=    ${DISTNAME}${EXTRACT_SUFX}
 DIST_SUBDIR=   roundcube
 
-RC_VERS=       1.3.7
+RC_VERS=       1.3.8
 
 USE_LANGUAGES=         # none
 USE_TOOLS+=            pax
+EXTRACT_USING=         gtar
 NO_BUILD=              yes
 
 PKG_SYSCONFSUBDIR?=    roundcube
diff -r da61563a9708 -r b406ba61cd82 mail/roundcube/distinfo
--- a/mail/roundcube/distinfo   Sun Nov 04 20:03:36 2018 +0000
+++ b/mail/roundcube/distinfo   Fri Nov 09 18:39:00 2018 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.62 2018/08/09 15:03:56 taca Exp $
+$NetBSD: distinfo,v 1.62.2.1 2018/11/09 18:39:00 spz Exp $
 
 SHA1 (roundcube/codemirror-5.21.0.zip) = 3b767c2e3acd6796e54ed19ed2ac0755fcf87984
 RMD160 (roundcube/codemirror-5.21.0.zip) = 3c629362a2a6c31aee099811b4598ba22e2fd763
@@ -16,10 +16,10 @@
 RMD160 (roundcube/publickey.js) = 40ae054af69c621c77a24e7a77f6280b1c630c23
 SHA512 (roundcube/publickey.js) = 443bb71b2e374e2c392ea2fba61ea1c5a78523aa9cf03846dc184ac937d967cf2f87f27529aaf82f0c982cb26b3d6423b202f6424eaf8d10c7478928b6efaa42
 Size (roundcube/publickey.js) = 19078 bytes
-SHA1 (roundcube/roundcubemail-1.3.7.tar.gz) = dbdd937b70a3787e3c69e51e4918a22fe6057abe
-RMD160 (roundcube/roundcubemail-1.3.7.tar.gz) = 9ca97f626aa0b3f6b4b73edd7a03156811290872
-SHA512 (roundcube/roundcubemail-1.3.7.tar.gz) = e8b9451f3819c232fefe9640328dd312a748861bbcbfc55103a91ec7b76961c6ae99e77e79db7a70b6f493d20e2da85b0ee60018dba0047639fc3d80aa4f26ee
-Size (roundcube/roundcubemail-1.3.7.tar.gz) = 3124939 bytes
+SHA1 (roundcube/roundcubemail-1.3.8.tar.gz) = 4029e260974f6eb719d7c0190608ddb0d0657087
+RMD160 (roundcube/roundcubemail-1.3.8.tar.gz) = 6fae09bdf31aa64a9eaffe1e4b65b01f866b8d5d
+SHA512 (roundcube/roundcubemail-1.3.8.tar.gz) = 73b53515a02be7a1d5cc2733e1507fc1f649f299415e93c5803f9f7309b0fc28d898b623c7e42f260910da9b19815d0994fd4dd57fa7ef1cb77a920e6dae6477
+Size (roundcube/roundcubemail-1.3.8.tar.gz) = 3125548 bytes
 SHA1 (roundcube/tinymce_4.5.8.zip) = 08b0757264adb86066940bbafb7aa9ec0c7c6685
 RMD160 (roundcube/tinymce_4.5.8.zip) = 68217fd86a7b359f2a3f233fd64f6d24ca0e6d53
 SHA512 (roundcube/tinymce_4.5.8.zip) = 5d0d9315f226730394e5fb13f2ed19edcc974adb34533437d4fb2b35ec5a77368d37a3c60b39afd5e30beff90f26feb7713d027f1ab0fa708e6a6b597edd4be6