diff options
author | bsiegert <bsiegert@pkgsrc.org> | 2020-08-23 18:58:28 +0000 |
---|---|---|
committer | bsiegert <bsiegert@pkgsrc.org> | 2020-08-23 18:58:28 +0000 |
commit | da7c5f2c550c67d4382d9cac4eba1e51a05c4e4d (patch) | |
tree | 8eb46da0ace56d6b14256769f171375dec56e5b7 | |
parent | 30c9215103f1a9cd71e61e5c5b2d97df0f1534d1 (diff) | |
download | pkgsrc-da7c5f2c550c67d4382d9cac4eba1e51a05c4e4d.tar.gz |
Pullup ticket #6302 - requested by taca
mail/roundcube: security fix
Revisions pulled up:
- mail/roundcube-plugin-password/distinfo 1.21
- mail/roundcube/Makefile.common 1.21
- mail/roundcube/distinfo 1.72
---
Module Name: pkgsrc
Committed By: taca
Date: Mon Aug 10 22:30:41 UTC 2020
Modified Files:
pkgsrc/mail/roundcube: Makefile.common distinfo
pkgsrc/mail/roundcube-plugin-password: distinfo
Log Message:
mail/roundcube: update to 1.4.8
Update roundcube to 1.4.8, security release.
RELEASE 1.4.8
-------------
- Security: Fix potential XSS issue in HTML editor of the identity signature input (#7507)
- Managesieve: Fix too-small input field in Elastic when using custom headers (#7498)
- Fix support for an error as a string in message_before_send hook (#7475)
- Elastic: Fix redundant scrollbar in plain text editor on mail reply (#7500)
- Elastic: Fix deleted and replied+forwarded icons on messages list (#7503)
- Managesieve: Allow angle brackets in out-of-office message body (#7518)
- Fix bug in conversion of email addresses to mailto links in plain text messages (#7526)
- Fix format=flowed formatting on plain text part derived from the HTML content (#7504)
- Fix incorrect rewriting of internal links in HTML content (#7512)
- Fix handling links without defined protocol (#7454)
- Fix paging of search results on IMAP servers with no SORT capability (#7462)
- Fix detecting special folders on servers with both SPECIAL-USE and LIST-STATUS (#7525)
- Security: Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145]
- Security: Fix cross-site scripting (XSS) via HTML messages with malicious math content
-rw-r--r-- | mail/roundcube-plugin-password/distinfo | 10 | ||||
-rw-r--r-- | mail/roundcube/Makefile.common | 4 | ||||
-rw-r--r-- | mail/roundcube/distinfo | 10 |
3 files changed, 12 insertions, 12 deletions
diff --git a/mail/roundcube-plugin-password/distinfo b/mail/roundcube-plugin-password/distinfo index 32c09e38fee..98ce7eb68da 100644 --- a/mail/roundcube-plugin-password/distinfo +++ b/mail/roundcube-plugin-password/distinfo @@ -1,7 +1,7 @@ -$NetBSD: distinfo,v 1.19.2.1 2020/07/29 19:39:44 bsiegert Exp $ +$NetBSD: distinfo,v 1.19.2.2 2020/08/23 18:58:28 bsiegert Exp $ -SHA1 (roundcubemail-1.4.7-complete.tar.gz) = 49f194d25ac7b9bf175bd52285bb61cde7baed44 -RMD160 (roundcubemail-1.4.7-complete.tar.gz) = bae742e12b0df75776ceb91c482eaffe0fd512d7 -SHA512 (roundcubemail-1.4.7-complete.tar.gz) = d668075c1fb1ac48931a82ca67b4ebeed6f1d1e82a336901f79967cb2eb91979fc7bb46d4895558f8e64f89f963002efc7c1ad23b93c52a252ce1a7aa04b678a -Size (roundcubemail-1.4.7-complete.tar.gz) = 7031947 bytes +SHA1 (roundcubemail-1.4.8-complete.tar.gz) = 3a6824fd68fef2e0d24f186cfbee5c6f9d6edbe9 +RMD160 (roundcubemail-1.4.8-complete.tar.gz) = eacf740aab6fa69fd023bc5f2356b49a81e596d0 +SHA512 (roundcubemail-1.4.8-complete.tar.gz) = 8b7734cdec95954b7e18a0e44957da6ef74b5b0c3d28a1449e8634faa230844f5e0c28954245641758f8b2d9102aa32f279765ed3dfa20fa7b00dee4e5347362 +Size (roundcubemail-1.4.8-complete.tar.gz) = 7032822 bytes SHA1 (patch-plugins_password_helpers_passwd-expect) = 15e427a3c90bf7c0437a023b3f099abb5a139165 diff --git a/mail/roundcube/Makefile.common b/mail/roundcube/Makefile.common index 968bd6c5122..89acaec9c8e 100644 --- a/mail/roundcube/Makefile.common +++ b/mail/roundcube/Makefile.common @@ -1,4 +1,4 @@ -# $NetBSD: Makefile.common,v 1.19.2.1 2020/07/29 19:39:44 bsiegert Exp $ +# $NetBSD: Makefile.common,v 1.19.2.2 2020/08/23 18:58:28 bsiegert Exp $ # # used by mail/roundcube/Makefile # used by mail/roundcube/plugins.mk @@ -10,7 +10,7 @@ GITHUB_PROJECT= roundcubemail GITHUB_RELEASE= ${RC_VERS} HOMEPAGE= https://roundcube.net/ -RC_VERS= 1.4.7 +RC_VERS= 1.4.8 USE_LANGUAGES= # none USE_TOOLS+= pax diff --git a/mail/roundcube/distinfo b/mail/roundcube/distinfo index fef00034118..6eae23a445d 100644 --- a/mail/roundcube/distinfo +++ b/mail/roundcube/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.70.2.1 2020/07/29 19:39:44 bsiegert Exp $ +$NetBSD: distinfo,v 1.70.2.2 2020/08/23 18:58:28 bsiegert Exp $ -SHA1 (roundcubemail-1.4.7-complete.tar.gz) = 49f194d25ac7b9bf175bd52285bb61cde7baed44 -RMD160 (roundcubemail-1.4.7-complete.tar.gz) = bae742e12b0df75776ceb91c482eaffe0fd512d7 -SHA512 (roundcubemail-1.4.7-complete.tar.gz) = d668075c1fb1ac48931a82ca67b4ebeed6f1d1e82a336901f79967cb2eb91979fc7bb46d4895558f8e64f89f963002efc7c1ad23b93c52a252ce1a7aa04b678a -Size (roundcubemail-1.4.7-complete.tar.gz) = 7031947 bytes +SHA1 (roundcubemail-1.4.8-complete.tar.gz) = 3a6824fd68fef2e0d24f186cfbee5c6f9d6edbe9 +RMD160 (roundcubemail-1.4.8-complete.tar.gz) = eacf740aab6fa69fd023bc5f2356b49a81e596d0 +SHA512 (roundcubemail-1.4.8-complete.tar.gz) = 8b7734cdec95954b7e18a0e44957da6ef74b5b0c3d28a1449e8634faa230844f5e0c28954245641758f8b2d9102aa32f279765ed3dfa20fa7b00dee4e5347362 +Size (roundcubemail-1.4.8-complete.tar.gz) = 7032822 bytes SHA1 (patch-af) = 7f29b0310a2a6b2e71858787e08b025e30d8bd12 SHA1 (patch-config_config.inc.php.sample) = 92a48a97b16fe3f5f4b9441fce762a559d8daca7 SHA1 (patch-program_lib_Roundcube_rcube__mime.php) = b1e9479d575b7fd61c413e2b76ee36c06ece7a5c |