CVS commit: pkgsrc/mail/roundcube

[Adam Hoka <ahoka%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ahoka
Date:           Tue Dec 23 23:26:38 UTC 2008

Modified Files:
        pkgsrc/mail/roundcube: Makefile distinfo

Log Message:
Update to version 2.0beta2.

This update fixes a serious security flaw, which can lead to arbitrary
command execution on the server running roundcube.

I could not find a formal changelog, but here's what the website writes:
 There were two security issues reported which are now fixed. The first was as
 possible code injection using the html2text conversion script. The other
 exploit used the unchecked size parameters of the quota image to let PHP
 create huge images eating up all the server memory.


To generate a diff of this commit:
cvs rdiff -r1.12 -r1.13 pkgsrc/mail/roundcube/Makefile
cvs rdiff -r1.8 -r1.9 pkgsrc/mail/roundcube/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.