[pkgsrc/trunk]: pkgsrc/mail/squirrelmail Update squirrelmail to 1.4.9a.

[obache <obache%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/dc316ca97576
branches:  trunk
changeset: 522147:dc316ca97576
user:      obache <obache%pkgsrc.org@localhost>
date:      Mon Dec 04 13:06:01 2006 +0000

description:
Update squirrelmail to 1.4.9a.

ChangLog:
Version 1.4.9a - 3 December 2006
--------------------------------
  - Security: Multiple IE cross site scripting issues related to the
    widely acceptation of the word expression and url by IE.
  - Security: Removing @import when sanitizing html mail.

Version 1.4.9 - 2 December 2006
-------------------------------
  - Drop obsolete script plugins/make_archive.pl.
  - Fixed Google translate form in translate plugin. Added new language
    pairs.
  - Added XMAGICTRASH extension tests in configtest utility. Removed code
    that handled 'inbox.trash' as special folder in courier (#1354393).
  - Allowed moving folders to trash in courier.
  - Fix misspelled constant PREG_SPLIT_NI_EMPTY in sqimap_get_message
    (#1543573).
  - Provide View Unsafe Images link on viewing a text/html attachment.
  - Fix variable typo in folders_create.php (#1545316).
  - Added Courier IMAP OUTBOX check to configtest utility.
  - If mailbox name starts with slash or contains ../, error message is
    generated. Safety check for insecure default UW IMAP setup (#1557078).
  - Ignore message copy errors when messages are deleted. Allows to delete
    messages when quota is exceeded (#614887, #646386, #1446026).
  - Fixed unintended literal fetching (#1562271).
  - Added global file based address book listing controls. Added line
    length configuration option for local_file address book backend
    (#1181561). Added address book data integrity checks in local_file
    address book backend. Fixed eregi and object notices in local_file
    and database address book backends. Added additional address book
    field support.
  - Fixed variable corruption in configtest utility.
  - Checked if configuration file is readable in configuration utility
    (#1568355).
  - Special mailboxes marked in special_mailbox hook are no longer listed
    in folder delete, rename and subscription options.
  - Translate plugin: prevent PHP notice when viewing empty message.
  - Add CEST and MEST (non-standard) timezone codes for +0200.
  - Add <label> to From field in message list.
  - Add support for parsing SpamAssassin's X-Spam-Status header (#1589520).
  - Fix in bodystructure parser code related to strings ending with an
    escape character.
  - Added "attachment */*" hook
  - Added third parameter $logout_link to logout_error hook that allows
    plugin control over login page URI displayed on login error page.
  - Security: close cross site scripting vulnerability in draft, compose
    and mailto functionality [CVE-2006-6142].
  - Security: work around an issue in Internet Explorer that would guess
    the mime type of a file based on contents, not Content-Type header.

diffstat:

 mail/squirrelmail/Makefile         |   5 ++---
 mail/squirrelmail/PLIST            |   5 +++--
 mail/squirrelmail/distinfo         |  10 +++++-----
 mail/squirrelmail/patches/patch-aa |  12 ++++++------
 4 files changed, 16 insertions(+), 16 deletions(-)

diffs (88 lines):

diff -r beb4b70c6f1a -r dc316ca97576 mail/squirrelmail/Makefile
--- a/mail/squirrelmail/Makefile        Mon Dec 04 12:47:31 2006 +0000
+++ b/mail/squirrelmail/Makefile        Mon Dec 04 13:06:01 2006 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.77 2006/11/10 17:38:47 tv Exp $
+# $NetBSD: Makefile,v 1.78 2006/12/04 13:06:01 obache Exp $
 
-DISTNAME=      squirrelmail-1.4.8
-#PKGREVISION=  1
+DISTNAME=      squirrelmail-1.4.9a
 CATEGORIES=    mail www
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=squirrelmail/}
 EXTRACT_SUFX=  .tar.bz2
diff -r beb4b70c6f1a -r dc316ca97576 mail/squirrelmail/PLIST
--- a/mail/squirrelmail/PLIST   Mon Dec 04 12:47:31 2006 +0000
+++ b/mail/squirrelmail/PLIST   Mon Dec 04 13:06:01 2006 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.19 2006/08/14 15:57:40 tron Exp $
+@comment $NetBSD: PLIST,v 1.20 2006/12/04 13:06:01 obache Exp $
 man/man8/squirrelmail-conf.pl.8
 share/examples/squirrelmail/squirrelmail.conf
 share/squirrelmail/AUTHORS
@@ -62,6 +62,8 @@
 share/squirrelmail/doc/ReleaseNotes/1.4/Notes-1.4.5.txt
 share/squirrelmail/doc/ReleaseNotes/1.4/Notes-1.4.6.txt
 share/squirrelmail/doc/ReleaseNotes/1.4/Notes-1.4.7.txt
+share/squirrelmail/doc/ReleaseNotes/1.4/Notes-1.4.8.txt
+share/squirrelmail/doc/ReleaseNotes/1.4/Notes-1.4.9.txt
 share/squirrelmail/doc/authentication.txt
 share/squirrelmail/doc/db-backend.txt
 share/squirrelmail/doc/ie_ssl.txt
@@ -251,7 +253,6 @@
 share/squirrelmail/plugins/mail_fetch/index.php
 share/squirrelmail/plugins/mail_fetch/options.php
 share/squirrelmail/plugins/mail_fetch/setup.php
-share/squirrelmail/plugins/make_archive.pl
 share/squirrelmail/plugins/message_details/index.php
 share/squirrelmail/plugins/message_details/message_details_bottom.php
 share/squirrelmail/plugins/message_details/message_details_main.php
diff -r beb4b70c6f1a -r dc316ca97576 mail/squirrelmail/distinfo
--- a/mail/squirrelmail/distinfo        Mon Dec 04 12:47:31 2006 +0000
+++ b/mail/squirrelmail/distinfo        Mon Dec 04 13:06:01 2006 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.34 2006/08/14 15:57:40 tron Exp $
+$NetBSD: distinfo,v 1.35 2006/12/04 13:06:01 obache Exp $
 
-SHA1 (squirrelmail-1.4.8.tar.bz2) = 45bab996b68b60647e668070466c15a20e991d52
-RMD160 (squirrelmail-1.4.8.tar.bz2) = 7ef716a1b34d477a77157b56a71feb7e0a1c41cb
-Size (squirrelmail-1.4.8.tar.bz2) = 474528 bytes
-SHA1 (patch-aa) = bc81f7c216fb7e372422991511eb6b89cd6b5e5f
+SHA1 (squirrelmail-1.4.9a.tar.bz2) = c9fc139c331cc99aa9bb54886106d2beccdd390a
+RMD160 (squirrelmail-1.4.9a.tar.bz2) = ccb4c0b4d74341862fecc4abe7f1fa63a4535984
+Size (squirrelmail-1.4.9a.tar.bz2) = 481601 bytes
+SHA1 (patch-aa) = 8b2f277985e2b7a723e10c3a1c60bd7bde69086f
diff -r beb4b70c6f1a -r dc316ca97576 mail/squirrelmail/patches/patch-aa
--- a/mail/squirrelmail/patches/patch-aa        Mon Dec 04 12:47:31 2006 +0000
+++ b/mail/squirrelmail/patches/patch-aa        Mon Dec 04 13:06:01 2006 +0000
@@ -1,8 +1,8 @@
-$NetBSD: patch-aa,v 1.11 2006/07/13 07:59:34 martti Exp $
+$NetBSD: patch-aa,v 1.12 2006/12/04 13:06:01 obache Exp $
 
---- config/config_default.php.orig     2006-06-08 15:37:31.000000000 +0000
-+++ config/config_default.php  2006-07-13 10:23:36.000000000 +0000
-@@ -400,7 +400,7 @@
+--- config/config_default.php.orig     2006-10-07 11:58:42.000000000 +0000
++++ config/config_default.php
+@@ -414,7 +414,7 @@ $default_sub_of_inbox = true;
   * false. (Cyrus works fine whether it's true OR false).
   * @global bool $show_contain_subfolders_option
   */
@@ -11,7 +11,7 @@
  
  /**
   * These next two options set the defaults for the way that the
-@@ -445,7 +445,7 @@
+@@ -459,7 +459,7 @@ $noselect_fix_enable = false;
   *   $data_dir = SM_PATH . 'data/';
   * @global string $data_dir
   */
@@ -20,7 +20,7 @@
  
  /**
   * Attachments directory
-@@ -463,7 +463,7 @@
+@@ -477,7 +477,7 @@ $data_dir = SM_PATH . 'data/';
   *    + It should probably be another directory than data_dir.
   * @global string $attachment_dir
   */