CVS commit: [pkgsrc-2020Q2] pkgsrc/mail

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sun Aug 23 18:58:29 UTC 2020

Modified Files:
        pkgsrc/mail/roundcube [pkgsrc-2020Q2]: Makefile.common distinfo
        pkgsrc/mail/roundcube-plugin-password [pkgsrc-2020Q2]: distinfo

Log Message:
Pullup ticket #6302 - requested by taca
mail/roundcube: security fix

Revisions pulled up:
- mail/roundcube-plugin-password/distinfo                       1.21
- mail/roundcube/Makefile.common                                1.21
- mail/roundcube/distinfo                                       1.72

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Mon Aug 10 22:30:41 UTC 2020

   Modified Files:
        pkgsrc/mail/roundcube: Makefile.common distinfo
        pkgsrc/mail/roundcube-plugin-password: distinfo

   Log Message:
   mail/roundcube: update to 1.4.8

   Update roundcube to 1.4.8, security release.

   RELEASE 1.4.8
   -------------
   - Security: Fix potential XSS issue in HTML editor of the identity signature input (#7507)
   - Managesieve: Fix too-small input field in Elastic when using custom headers (#7498)
   - Fix support for an error as a string in message_before_send hook (#7475)
   - Elastic: Fix redundant scrollbar in plain text editor on mail reply (#7500)
   - Elastic: Fix deleted and replied+forwarded icons on messages list (#7503)
   - Managesieve: Allow angle brackets in out-of-office message body (#7518)
   - Fix bug in conversion of email addresses to mailto links in plain text messages (#7526)
   - Fix format=flowed formatting on plain text part derived from the HTML content (#7504)
   - Fix incorrect rewriting of internal links in HTML content (#7512)
   - Fix handling links without defined protocol (#7454)
   - Fix paging of search results on IMAP servers with no SORT capability (#7462)
   - Fix detecting special folders on servers with both SPECIAL-USE and LIST-STATUS (#7525)
   - Security: Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145]
   - Security: Fix cross-site scripting (XSS) via HTML messages with malicious math content


To generate a diff of this commit:
cvs rdiff -u -r1.19.2.1 -r1.19.2.2 pkgsrc/mail/roundcube/Makefile.common
cvs rdiff -u -r1.70.2.1 -r1.70.2.2 pkgsrc/mail/roundcube/distinfo
cvs rdiff -u -r1.19.2.1 -r1.19.2.2 \
    pkgsrc/mail/roundcube-plugin-password/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/roundcube/Makefile.common
diff -u pkgsrc/mail/roundcube/Makefile.common:1.19.2.1 pkgsrc/mail/roundcube/Makefile.common:1.19.2.2
--- pkgsrc/mail/roundcube/Makefile.common:1.19.2.1      Wed Jul 29 19:39:44 2020
+++ pkgsrc/mail/roundcube/Makefile.common       Sun Aug 23 18:58:28 2020
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.19.2.1 2020/07/29 19:39:44 bsiegert Exp $
+# $NetBSD: Makefile.common,v 1.19.2.2 2020/08/23 18:58:28 bsiegert Exp $
 #
 # used by mail/roundcube/Makefile
 # used by mail/roundcube/plugins.mk
@@ -10,7 +10,7 @@ GITHUB_PROJECT=       roundcubemail
 GITHUB_RELEASE=        ${RC_VERS}
 HOMEPAGE=      https://roundcube.net/
 
-RC_VERS=       1.4.7
+RC_VERS=       1.4.8
 
 USE_LANGUAGES=         # none
 USE_TOOLS+=            pax

Index: pkgsrc/mail/roundcube/distinfo
diff -u pkgsrc/mail/roundcube/distinfo:1.70.2.1 pkgsrc/mail/roundcube/distinfo:1.70.2.2
--- pkgsrc/mail/roundcube/distinfo:1.70.2.1     Wed Jul 29 19:39:44 2020
+++ pkgsrc/mail/roundcube/distinfo      Sun Aug 23 18:58:28 2020
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.70.2.1 2020/07/29 19:39:44 bsiegert Exp $
+$NetBSD: distinfo,v 1.70.2.2 2020/08/23 18:58:28 bsiegert Exp $
 
-SHA1 (roundcubemail-1.4.7-complete.tar.gz) = 49f194d25ac7b9bf175bd52285bb61cde7baed44
-RMD160 (roundcubemail-1.4.7-complete.tar.gz) = bae742e12b0df75776ceb91c482eaffe0fd512d7
-SHA512 (roundcubemail-1.4.7-complete.tar.gz) = d668075c1fb1ac48931a82ca67b4ebeed6f1d1e82a336901f79967cb2eb91979fc7bb46d4895558f8e64f89f963002efc7c1ad23b93c52a252ce1a7aa04b678a
-Size (roundcubemail-1.4.7-complete.tar.gz) = 7031947 bytes
+SHA1 (roundcubemail-1.4.8-complete.tar.gz) = 3a6824fd68fef2e0d24f186cfbee5c6f9d6edbe9
+RMD160 (roundcubemail-1.4.8-complete.tar.gz) = eacf740aab6fa69fd023bc5f2356b49a81e596d0
+SHA512 (roundcubemail-1.4.8-complete.tar.gz) = 8b7734cdec95954b7e18a0e44957da6ef74b5b0c3d28a1449e8634faa230844f5e0c28954245641758f8b2d9102aa32f279765ed3dfa20fa7b00dee4e5347362
+Size (roundcubemail-1.4.8-complete.tar.gz) = 7032822 bytes
 SHA1 (patch-af) = 7f29b0310a2a6b2e71858787e08b025e30d8bd12
 SHA1 (patch-config_config.inc.php.sample) = 92a48a97b16fe3f5f4b9441fce762a559d8daca7
 SHA1 (patch-program_lib_Roundcube_rcube__mime.php) = b1e9479d575b7fd61c413e2b76ee36c06ece7a5c

Index: pkgsrc/mail/roundcube-plugin-password/distinfo
diff -u pkgsrc/mail/roundcube-plugin-password/distinfo:1.19.2.1 pkgsrc/mail/roundcube-plugin-password/distinfo:1.19.2.2
--- pkgsrc/mail/roundcube-plugin-password/distinfo:1.19.2.1     Wed Jul 29 19:39:44 2020
+++ pkgsrc/mail/roundcube-plugin-password/distinfo      Sun Aug 23 18:58:28 2020
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.19.2.1 2020/07/29 19:39:44 bsiegert Exp $
+$NetBSD: distinfo,v 1.19.2.2 2020/08/23 18:58:28 bsiegert Exp $
 
-SHA1 (roundcubemail-1.4.7-complete.tar.gz) = 49f194d25ac7b9bf175bd52285bb61cde7baed44
-RMD160 (roundcubemail-1.4.7-complete.tar.gz) = bae742e12b0df75776ceb91c482eaffe0fd512d7
-SHA512 (roundcubemail-1.4.7-complete.tar.gz) = d668075c1fb1ac48931a82ca67b4ebeed6f1d1e82a336901f79967cb2eb91979fc7bb46d4895558f8e64f89f963002efc7c1ad23b93c52a252ce1a7aa04b678a
-Size (roundcubemail-1.4.7-complete.tar.gz) = 7031947 bytes
+SHA1 (roundcubemail-1.4.8-complete.tar.gz) = 3a6824fd68fef2e0d24f186cfbee5c6f9d6edbe9
+RMD160 (roundcubemail-1.4.8-complete.tar.gz) = eacf740aab6fa69fd023bc5f2356b49a81e596d0
+SHA512 (roundcubemail-1.4.8-complete.tar.gz) = 8b7734cdec95954b7e18a0e44957da6ef74b5b0c3d28a1449e8634faa230844f5e0c28954245641758f8b2d9102aa32f279765ed3dfa20fa7b00dee4e5347362
+Size (roundcubemail-1.4.8-complete.tar.gz) = 7032822 bytes
 SHA1 (patch-plugins_password_helpers_passwd-expect) = 15e427a3c90bf7c0437a023b3f099abb5a139165