mail/roundcube: update to 1.3.8

This update includes XSS security problem.

RELEASE 1.3.8
-------------

- Fix PHP warnings on dummy QUOTA responses in Courier-IMAP 4.17.1 (#6374)
- Fix so fallback from BINARY to BODY FETCH is used also on [PARSE] errors in dovecot 2.3 (#6383)
- Fix invalid regular expressions that throw warnings on PHP 7.3 (#6398)
- Fix so Classic skin splitter does not escape out of window (#6397)
- Fix XSS issue in handling invalid style tag content (#6410)
- Fix compatibility with MySQL 8 - error on 'system' table use
- Managesieve: Fix bug where show_real_foldernames setting wasn't respected (#6422)
- New_user_identity: Fix %fu/%u vars substitution in user specific LDAP params (#6419)
- Fix support for "allow-from <uri>" in "x_frame_options" config option (#6449)
- Fix bug where valid content between HTML comments could have been skipped in some cases (#6464)
- Fix multiple VCard field search (#6466)
- Fix session issue on long running requests (#6470)

2 files changed, 8 insertions, 7 deletions

diff --git a/mail/roundcube/Makefile.common b/mail/roundcube/Makefile.common
index 277a55d9d7b..59e0f428bb0 100644
--- a/mail/roundcube/Makefile.common
+++ b/mail/roundcube/Makefile.common
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.11 2018/08/09 15:03:56 taca Exp $
+# $NetBSD: Makefile.common,v 1.12 2018/10/28 15:23:34 taca Exp $
 #
 # used by mail/roundcube/Makefile
 # used by mail/roundcube/plugins.mk
@@ -11,10 +11,11 @@ HOMEPAGE=	http://roundcube.net/
 DISTFILES+=	${DISTNAME}${EXTRACT_SUFX}
 DIST_SUBDIR=	roundcube
 
-RC_VERS=	1.3.7
+RC_VERS=	1.3.8
 
 USE_LANGUAGES=		# none
 USE_TOOLS+=		pax
+EXTRACT_USING=		gtar
 NO_BUILD=		yes
 
 PKG_SYSCONFSUBDIR?=	roundcube
diff --git a/mail/roundcube/distinfo b/mail/roundcube/distinfo
index 54e784e7ccb..d425358e79e 100644
--- a/mail/roundcube/distinfo
+++ b/mail/roundcube/distinfo
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.62 2018/08/09 15:03:56 taca Exp $
+$NetBSD: distinfo,v 1.63 2018/10/28 15:23:34 taca Exp $
 
 SHA1 (roundcube/codemirror-5.21.0.zip) = 3b767c2e3acd6796e54ed19ed2ac0755fcf87984
 RMD160 (roundcube/codemirror-5.21.0.zip) = 3c629362a2a6c31aee099811b4598ba22e2fd763
@@ -16,10 +16,10 @@ SHA1 (roundcube/publickey.js) = d0920e190754e024c4be76ad5bbc7e76b2e37a4d
 RMD160 (roundcube/publickey.js) = 40ae054af69c621c77a24e7a77f6280b1c630c23
 SHA512 (roundcube/publickey.js) = 443bb71b2e374e2c392ea2fba61ea1c5a78523aa9cf03846dc184ac937d967cf2f87f27529aaf82f0c982cb26b3d6423b202f6424eaf8d10c7478928b6efaa42
 Size (roundcube/publickey.js) = 19078 bytes
-SHA1 (roundcube/roundcubemail-1.3.7.tar.gz) = dbdd937b70a3787e3c69e51e4918a22fe6057abe
-RMD160 (roundcube/roundcubemail-1.3.7.tar.gz) = 9ca97f626aa0b3f6b4b73edd7a03156811290872
-SHA512 (roundcube/roundcubemail-1.3.7.tar.gz) = e8b9451f3819c232fefe9640328dd312a748861bbcbfc55103a91ec7b76961c6ae99e77e79db7a70b6f493d20e2da85b0ee60018dba0047639fc3d80aa4f26ee
-Size (roundcube/roundcubemail-1.3.7.tar.gz) = 3124939 bytes
+SHA1 (roundcube/roundcubemail-1.3.8.tar.gz) = 4029e260974f6eb719d7c0190608ddb0d0657087
+RMD160 (roundcube/roundcubemail-1.3.8.tar.gz) = 6fae09bdf31aa64a9eaffe1e4b65b01f866b8d5d
+SHA512 (roundcube/roundcubemail-1.3.8.tar.gz) = 73b53515a02be7a1d5cc2733e1507fc1f649f299415e93c5803f9f7309b0fc28d898b623c7e42f260910da9b19815d0994fd4dd57fa7ef1cb77a920e6dae6477
+Size (roundcube/roundcubemail-1.3.8.tar.gz) = 3125548 bytes
 SHA1 (roundcube/tinymce_4.5.8.zip) = 08b0757264adb86066940bbafb7aa9ec0c7c6685
 RMD160 (roundcube/tinymce_4.5.8.zip) = 68217fd86a7b359f2a3f233fd64f6d24ca0e6d53
 SHA512 (roundcube/tinymce_4.5.8.zip) = 5d0d9315f226730394e5fb13f2ed19edcc974adb34533437d4fb2b35ec5a77368d37a3c60b39afd5e30beff90f26feb7713d027f1ab0fa708e6a6b597edd4be6