[pkgsrc/pkgsrc-2017Q3]: pkgsrc/mail Pullup ticket #5635 - requested by taca

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/3b38ac0b59b8
branches:  pkgsrc-2017Q3
changeset: 408604:3b38ac0b59b8
user:      spz <spz%pkgsrc.org@localhost>
date:      Sun Nov 12 13:15:44 2017 +0000

description:
Pullup ticket #5635 - requested by taca
mail/roundcube: security update
mail/roundcube-plugin-enigma: security update
mail/roundcube-plugin-password: security update
mail/roundcube-plugin-zipdownload: security update

Revisions pulled up:
- mail/roundcube-plugin-enigma/distinfo                         1.7
- mail/roundcube-plugin-password/distinfo                       1.7
- mail/roundcube-plugin-zipdownload/distinfo                    1.7
- mail/roundcube/Makefile.common                                1.7
- mail/roundcube/distinfo                                       1.58

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Nov  9 01:13:12 UTC 2017

   Modified Files:
        pkgsrc/mail/roundcube: Makefile.common distinfo
        pkgsrc/mail/roundcube-plugin-enigma: distinfo
        pkgsrc/mail/roundcube-plugin-password: distinfo
        pkgsrc/mail/roundcube-plugin-zipdownload: distinfo

   Log Message:
   mail/roundcube: update to 1.2.7

   Security fix for CVE-2017-16651.

   RELEASE 1.2.7
   -------------
   - Fix rewind(): stream does not support seeking (#5950)
   - Fix bug where HTML messages could have been rendered empty on some systems
     (#5957)
   - Fix (again) bug where image data URIs in css style were treated as
     evil/remote in mail preview (#5580)
   - Managesieve: Fix parsing dot-staffed lines in multiline text (#5838, #5959)
   - Fix file disclosure vulnerability caused by insufficient input validation
     [CVE-2017-16651] (#6026)


   To generate a diff of this commit:
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube/Makefile.common
   cvs rdiff -u -r1.57 -r1.58 pkgsrc/mail/roundcube/distinfo
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-enigma/distinfo
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-password/distinfo
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/mail/roundcube-plugin-zipdownload/distinfo

diffstat:

 mail/roundcube-plugin-enigma/distinfo      |  10 +++++-----
 mail/roundcube-plugin-password/distinfo    |  10 +++++-----
 mail/roundcube-plugin-zipdownload/distinfo |  10 +++++-----
 mail/roundcube/Makefile.common             |   4 ++--
 mail/roundcube/distinfo                    |  10 +++++-----
 5 files changed, 22 insertions(+), 22 deletions(-)

diffs (81 lines):

diff -r 911bfa26302d -r 3b38ac0b59b8 mail/roundcube-plugin-enigma/distinfo
--- a/mail/roundcube-plugin-enigma/distinfo     Sun Nov 12 13:04:21 2017 +0000
+++ b/mail/roundcube-plugin-enigma/distinfo     Sun Nov 12 13:15:44 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.6 2017/09/11 13:57:24 taca Exp $
+$NetBSD: distinfo,v 1.6.4.1 2017/11/12 13:15:44 spz Exp $
 
-SHA1 (roundcubemail-1.2.6.tar.gz) = 466191ae8eb779e45147a3bb0504b4549bef2944
-RMD160 (roundcubemail-1.2.6.tar.gz) = 75234503b8e3729a5c28af92128990f4428de2a8
-SHA512 (roundcubemail-1.2.6.tar.gz) = 6e6acc3311747d5c822711029bec0e97b32e17cf5bd55d3e26dc9f6fc7b67d15b940001c3b0f13aa674f9d5d477645438cc782f432d946ba031dd93bde2d852f
-Size (roundcubemail-1.2.6.tar.gz) = 3538567 bytes
+SHA1 (roundcubemail-1.2.7.tar.gz) = b5aa5303e0e940da2117802c7ffd22dc265c4699
+RMD160 (roundcubemail-1.2.7.tar.gz) = 7d24ca42391a62d494b0615e92203596f5573761
+SHA512 (roundcubemail-1.2.7.tar.gz) = ef8058e004a89cb83119972e7fd765920c7cfe8e5157c305b782cda1fead1a01335f5182b45930e409a070aadcf440635b9dc7c41df215d904cbaea0a0ed4191
+Size (roundcubemail-1.2.7.tar.gz) = 3539187 bytes
diff -r 911bfa26302d -r 3b38ac0b59b8 mail/roundcube-plugin-password/distinfo
--- a/mail/roundcube-plugin-password/distinfo   Sun Nov 12 13:04:21 2017 +0000
+++ b/mail/roundcube-plugin-password/distinfo   Sun Nov 12 13:15:44 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.6 2017/09/11 14:00:23 taca Exp $
+$NetBSD: distinfo,v 1.6.4.1 2017/11/12 13:15:44 spz Exp $
 
-SHA1 (roundcubemail-1.2.6.tar.gz) = 466191ae8eb779e45147a3bb0504b4549bef2944
-RMD160 (roundcubemail-1.2.6.tar.gz) = 75234503b8e3729a5c28af92128990f4428de2a8
-SHA512 (roundcubemail-1.2.6.tar.gz) = 6e6acc3311747d5c822711029bec0e97b32e17cf5bd55d3e26dc9f6fc7b67d15b940001c3b0f13aa674f9d5d477645438cc782f432d946ba031dd93bde2d852f
-Size (roundcubemail-1.2.6.tar.gz) = 3538567 bytes
+SHA1 (roundcubemail-1.2.7.tar.gz) = b5aa5303e0e940da2117802c7ffd22dc265c4699
+RMD160 (roundcubemail-1.2.7.tar.gz) = 7d24ca42391a62d494b0615e92203596f5573761
+SHA512 (roundcubemail-1.2.7.tar.gz) = ef8058e004a89cb83119972e7fd765920c7cfe8e5157c305b782cda1fead1a01335f5182b45930e409a070aadcf440635b9dc7c41df215d904cbaea0a0ed4191
+Size (roundcubemail-1.2.7.tar.gz) = 3539187 bytes
diff -r 911bfa26302d -r 3b38ac0b59b8 mail/roundcube-plugin-zipdownload/distinfo
--- a/mail/roundcube-plugin-zipdownload/distinfo        Sun Nov 12 13:04:21 2017 +0000
+++ b/mail/roundcube-plugin-zipdownload/distinfo        Sun Nov 12 13:15:44 2017 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.6 2017/09/11 14:01:02 taca Exp $
+$NetBSD: distinfo,v 1.6.4.1 2017/11/12 13:15:44 spz Exp $
 
-SHA1 (roundcubemail-1.2.6.tar.gz) = 466191ae8eb779e45147a3bb0504b4549bef2944
-RMD160 (roundcubemail-1.2.6.tar.gz) = 75234503b8e3729a5c28af92128990f4428de2a8
-SHA512 (roundcubemail-1.2.6.tar.gz) = 6e6acc3311747d5c822711029bec0e97b32e17cf5bd55d3e26dc9f6fc7b67d15b940001c3b0f13aa674f9d5d477645438cc782f432d946ba031dd93bde2d852f
-Size (roundcubemail-1.2.6.tar.gz) = 3538567 bytes
+SHA1 (roundcubemail-1.2.7.tar.gz) = b5aa5303e0e940da2117802c7ffd22dc265c4699
+RMD160 (roundcubemail-1.2.7.tar.gz) = 7d24ca42391a62d494b0615e92203596f5573761
+SHA512 (roundcubemail-1.2.7.tar.gz) = ef8058e004a89cb83119972e7fd765920c7cfe8e5157c305b782cda1fead1a01335f5182b45930e409a070aadcf440635b9dc7c41df215d904cbaea0a0ed4191
+Size (roundcubemail-1.2.7.tar.gz) = 3539187 bytes
diff -r 911bfa26302d -r 3b38ac0b59b8 mail/roundcube/Makefile.common
--- a/mail/roundcube/Makefile.common    Sun Nov 12 13:04:21 2017 +0000
+++ b/mail/roundcube/Makefile.common    Sun Nov 12 13:15:44 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.6 2017/09/11 13:56:39 taca Exp $
+# $NetBSD: Makefile.common,v 1.6.4.1 2017/11/12 13:15:44 spz Exp $
 #
 # used by mail/roundcube/Makefile
 # used by mail/roundcube/plugins.mk
@@ -9,7 +9,7 @@
 GITHUB_PROJECT=        roundcubemail
 HOMEPAGE=      http://roundcube.net/
 
-RC_VERS=       1.2.6
+RC_VERS=       1.2.7
 
 USE_LANGUAGES=         # none
 USE_TOOLS+=            pax
diff -r 911bfa26302d -r 3b38ac0b59b8 mail/roundcube/distinfo
--- a/mail/roundcube/distinfo   Sun Nov 12 13:04:21 2017 +0000
+++ b/mail/roundcube/distinfo   Sun Nov 12 13:15:44 2017 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.57 2017/09/11 13:56:39 taca Exp $
+$NetBSD: distinfo,v 1.57.4.1 2017/11/12 13:15:44 spz Exp $
 
-SHA1 (roundcubemail-1.2.6.tar.gz) = 466191ae8eb779e45147a3bb0504b4549bef2944
-RMD160 (roundcubemail-1.2.6.tar.gz) = 75234503b8e3729a5c28af92128990f4428de2a8
-SHA512 (roundcubemail-1.2.6.tar.gz) = 6e6acc3311747d5c822711029bec0e97b32e17cf5bd55d3e26dc9f6fc7b67d15b940001c3b0f13aa674f9d5d477645438cc782f432d946ba031dd93bde2d852f
-Size (roundcubemail-1.2.6.tar.gz) = 3538567 bytes
+SHA1 (roundcubemail-1.2.7.tar.gz) = b5aa5303e0e940da2117802c7ffd22dc265c4699
+RMD160 (roundcubemail-1.2.7.tar.gz) = 7d24ca42391a62d494b0615e92203596f5573761
+SHA512 (roundcubemail-1.2.7.tar.gz) = ef8058e004a89cb83119972e7fd765920c7cfe8e5157c305b782cda1fead1a01335f5182b45930e409a070aadcf440635b9dc7c41df215d904cbaea0a0ed4191
+Size (roundcubemail-1.2.7.tar.gz) = 3539187 bytes
 SHA1 (patch-ac) = 235116580665d5d58edc218c063b41171a2d9227
 SHA1 (patch-af) = 1f95a7005569207469563aa37ff48da0383b7668
 SHA1 (patch-config_config.inc.php.sample) = 1c9751ba36394d592e7d3cdcc705010e0a4adda9