CVS commit: pkgsrc/mail

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Dec 15 14:30:13 UTC 2025

Modified Files:
        pkgsrc/mail/roundcube: Makefile.common PLIST distinfo
        pkgsrc/mail/roundcube-plugin-password: Makefile distinfo

Log Message:
mail/roundcube: update to 1.6.12

This release contains security related fixes, last two items.

Roundcube 1.6.12 (2025-12-14)

* Support IPv6 in database DSN (#9937)
* Don't force specific error_reporting setting
* Fix compatibility with PHP 8.5 regarding array_first()
* Remove X-XSS-Protection example from .htaccess file (#9875)
* Fix "Assign to group" action state after creation of a first group (#9889)
* Fix bug where contacts search would fail if `contactlist_fields` contained
  vcard fields (#9850)
* Fix bug where an mbox export file could include inconsistent message
  delimiters (#9879)
* Fix parsing of inline styles that aren't well-formatted (#9948)
* Fix Cross-Site-Scripting vulnerability via SVG's animate tag
* Fix Information Disclosure vulnerability in the HTML style sanitizer


To generate a diff of this commit:
cvs rdiff -u -r1.39 -r1.40 pkgsrc/mail/roundcube/Makefile.common
cvs rdiff -u -r1.57 -r1.58 pkgsrc/mail/roundcube/PLIST
cvs rdiff -u -r1.94 -r1.95 pkgsrc/mail/roundcube/distinfo
cvs rdiff -u -r1.26 -r1.27 pkgsrc/mail/roundcube-plugin-password/Makefile
cvs rdiff -u -r1.41 -r1.42 pkgsrc/mail/roundcube-plugin-password/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/roundcube/Makefile.common
diff -u pkgsrc/mail/roundcube/Makefile.common:1.39 pkgsrc/mail/roundcube/Makefile.common:1.40
--- pkgsrc/mail/roundcube/Makefile.common:1.39  Tue Jun  3 02:08:39 2025
+++ pkgsrc/mail/roundcube/Makefile.common       Mon Dec 15 14:30:13 2025
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.39 2025/06/03 02:08:39 taca Exp $
+# $NetBSD: Makefile.common,v 1.40 2025/12/15 14:30:13 taca Exp $
 #
 # used by mail/roundcube/Makefile
 # used by mail/roundcube/plugins.mk
@@ -10,7 +10,7 @@ GITHUB_PROJECT=       roundcubemail
 GITHUB_RELEASE=        ${RC_VERS}
 HOMEPAGE=      https://roundcube.net/
 
-RC_VERS=       1.6.11
+RC_VERS=       1.6.12
 
 USE_LANGUAGES=         # none
 USE_TOOLS+=            pax

Index: pkgsrc/mail/roundcube/PLIST
diff -u pkgsrc/mail/roundcube/PLIST:1.57 pkgsrc/mail/roundcube/PLIST:1.58
--- pkgsrc/mail/roundcube/PLIST:1.57    Wed May 22 13:15:59 2024
+++ pkgsrc/mail/roundcube/PLIST Mon Dec 15 14:30:13 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.57 2024/05/22 13:15:59 taca Exp $
+@comment $NetBSD: PLIST,v 1.58 2025/12/15 14:30:13 taca Exp $
 share/doc/roundcube/CHANGELOG.md
 share/doc/roundcube/INSTALL
 share/doc/roundcube/LICENSE
@@ -2089,6 +2089,7 @@ share/roundcube/vendor/guzzlehttp/guzzle
 share/roundcube/vendor/guzzlehttp/guzzle/README.md
 share/roundcube/vendor/guzzlehttp/guzzle/UPGRADING.md
 share/roundcube/vendor/guzzlehttp/guzzle/composer.json
+share/roundcube/vendor/guzzlehttp/guzzle/package-lock.json
 share/roundcube/vendor/guzzlehttp/guzzle/src/BodySummarizer.php
 share/roundcube/vendor/guzzlehttp/guzzle/src/BodySummarizerInterface.php
 share/roundcube/vendor/guzzlehttp/guzzle/src/Client.php
@@ -2355,10 +2356,8 @@ share/roundcube/vendor/ralouphie/getallh
 share/roundcube/vendor/ralouphie/getallheaders/README.md
 share/roundcube/vendor/ralouphie/getallheaders/composer.json
 share/roundcube/vendor/ralouphie/getallheaders/src/getallheaders.php
-share/roundcube/vendor/roundcube/plugin-installer/.php-cs-fixer.dist.php
 share/roundcube/vendor/roundcube/plugin-installer/README.md
 share/roundcube/vendor/roundcube/plugin-installer/composer.json
-share/roundcube/vendor/roundcube/plugin-installer/phpstan.neon.dist
 share/roundcube/vendor/roundcube/plugin-installer/src/ExtensionInstaller.php
 share/roundcube/vendor/roundcube/plugin-installer/src/PluginInstaller.php
 share/roundcube/vendor/roundcube/plugin-installer/src/RoundcubeInstaller.php

Index: pkgsrc/mail/roundcube/distinfo
diff -u pkgsrc/mail/roundcube/distinfo:1.94 pkgsrc/mail/roundcube/distinfo:1.95
--- pkgsrc/mail/roundcube/distinfo:1.94 Tue Jun  3 02:08:39 2025
+++ pkgsrc/mail/roundcube/distinfo      Mon Dec 15 14:30:13 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.94 2025/06/03 02:08:39 taca Exp $
+$NetBSD: distinfo,v 1.95 2025/12/15 14:30:13 taca Exp $
 
-BLAKE2s (roundcubemail-1.6.11-complete.tar.gz) = 0a6ae314a786f5d2b037e3ec48a15e466ba2826e700851ad5287530b44d01905
-SHA512 (roundcubemail-1.6.11-complete.tar.gz) = 842d6b0f9bfdb0661de798fb83ccfbf202583214cf478fb7092529785f31b9aa8d7a1fcd63c1d6b967e396e1e2a7750669e238d112875befb3f017b6034acacc
-Size (roundcubemail-1.6.11-complete.tar.gz) = 5839956 bytes
+BLAKE2s (roundcubemail-1.6.12-complete.tar.gz) = b881ad2ef448ea9893205fce247a36facaf91891091238128e40f899f9f07f94
+SHA512 (roundcubemail-1.6.12-complete.tar.gz) = b35c4de8220fc85628d6367bcd22b718113e6b649a93bbe7d3a64ef9d43e22fd39c6129f64bb9c541fa2e68fee216433238de8237d638bc7d6204e84670254ac
+Size (roundcubemail-1.6.12-complete.tar.gz) = 5840143 bytes
 SHA1 (patch-config_config.inc.php.sample) = 92a48a97b16fe3f5f4b9441fce762a559d8daca7
 SHA1 (patch-program_include_iniset.php) = 8a6c13c0c87d583ed60e43c01a4173d9d802a6a1
 SHA1 (patch-program_lib_Roundcube_rcube__mime.php) = bfefc6850d3db230dd4224491e895fe25a32e87a

Index: pkgsrc/mail/roundcube-plugin-password/Makefile
diff -u pkgsrc/mail/roundcube-plugin-password/Makefile:1.26 pkgsrc/mail/roundcube-plugin-password/Makefile:1.27
--- pkgsrc/mail/roundcube-plugin-password/Makefile:1.26 Fri Jul  4 08:47:26 2025
+++ pkgsrc/mail/roundcube-plugin-password/Makefile      Mon Dec 15 14:30:13 2025
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.26 2025/07/04 08:47:26 wiz Exp $
+# $NetBSD: Makefile,v 1.27 2025/12/15 14:30:13 taca Exp $
 
 PLUGIN=                password
 
 MAINTAINER=    taca%NetBSD.org@localhost
 COMMENT=       Password change plugin for roundcube
-PKGREVISION=   1
 LICENSE=       gnu-gpl-v3
 
 DEPENDS+=      tcl-expect>=5.32.1:../../lang/tcl-expect

Index: pkgsrc/mail/roundcube-plugin-password/distinfo
diff -u pkgsrc/mail/roundcube-plugin-password/distinfo:1.41 pkgsrc/mail/roundcube-plugin-password/distinfo:1.42
--- pkgsrc/mail/roundcube-plugin-password/distinfo:1.41 Tue Jun  3 02:08:39 2025
+++ pkgsrc/mail/roundcube-plugin-password/distinfo      Mon Dec 15 14:30:13 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.41 2025/06/03 02:08:39 taca Exp $
+$NetBSD: distinfo,v 1.42 2025/12/15 14:30:13 taca Exp $
 
-BLAKE2s (roundcubemail-1.6.11-complete.tar.gz) = 0a6ae314a786f5d2b037e3ec48a15e466ba2826e700851ad5287530b44d01905
-SHA512 (roundcubemail-1.6.11-complete.tar.gz) = 842d6b0f9bfdb0661de798fb83ccfbf202583214cf478fb7092529785f31b9aa8d7a1fcd63c1d6b967e396e1e2a7750669e238d112875befb3f017b6034acacc
-Size (roundcubemail-1.6.11-complete.tar.gz) = 5839956 bytes
+BLAKE2s (roundcubemail-1.6.12-complete.tar.gz) = b881ad2ef448ea9893205fce247a36facaf91891091238128e40f899f9f07f94
+SHA512 (roundcubemail-1.6.12-complete.tar.gz) = b35c4de8220fc85628d6367bcd22b718113e6b649a93bbe7d3a64ef9d43e22fd39c6129f64bb9c541fa2e68fee216433238de8237d638bc7d6204e84670254ac
+Size (roundcubemail-1.6.12-complete.tar.gz) = 5840143 bytes
 SHA1 (patch-plugins_password_helpers_passwd-expect) = 15e427a3c90bf7c0437a023b3f099abb5a139165