CVS commit: pkgsrc/mail

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Feb  8 15:27:25 UTC 2026

Modified Files:
        pkgsrc/mail/roundcube: Makefile.common distinfo
        pkgsrc/mail/roundcube-plugin-password: distinfo

Log Message:
mail/roundcube: update to 1.6.13

This is security update.

1.6.13 (2026-02-08)

* Managesieve: Fix handling of string-list format values for date tests in
  Out of Office (#10075)
* Fix remote image blocking bypass via SVG content reported by nullcathedral
* Fix CSS injection vulnerability reported by CERT Polska


To generate a diff of this commit:
cvs rdiff -u -r1.40 -r1.41 pkgsrc/mail/roundcube/Makefile.common
cvs rdiff -u -r1.95 -r1.96 pkgsrc/mail/roundcube/distinfo
cvs rdiff -u -r1.42 -r1.43 pkgsrc/mail/roundcube-plugin-password/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/roundcube/Makefile.common
diff -u pkgsrc/mail/roundcube/Makefile.common:1.40 pkgsrc/mail/roundcube/Makefile.common:1.41
--- pkgsrc/mail/roundcube/Makefile.common:1.40  Mon Dec 15 14:30:13 2025
+++ pkgsrc/mail/roundcube/Makefile.common       Sun Feb  8 15:27:25 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.40 2025/12/15 14:30:13 taca Exp $
+# $NetBSD: Makefile.common,v 1.41 2026/02/08 15:27:25 taca Exp $
 #
 # used by mail/roundcube/Makefile
 # used by mail/roundcube/plugins.mk
@@ -10,7 +10,7 @@ GITHUB_PROJECT=       roundcubemail
 GITHUB_RELEASE=        ${RC_VERS}
 HOMEPAGE=      https://roundcube.net/
 
-RC_VERS=       1.6.12
+RC_VERS=       1.6.13
 
 USE_LANGUAGES=         # none
 USE_TOOLS+=            pax

Index: pkgsrc/mail/roundcube/distinfo
diff -u pkgsrc/mail/roundcube/distinfo:1.95 pkgsrc/mail/roundcube/distinfo:1.96
--- pkgsrc/mail/roundcube/distinfo:1.95 Mon Dec 15 14:30:13 2025
+++ pkgsrc/mail/roundcube/distinfo      Sun Feb  8 15:27:25 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.95 2025/12/15 14:30:13 taca Exp $
+$NetBSD: distinfo,v 1.96 2026/02/08 15:27:25 taca Exp $
 
-BLAKE2s (roundcubemail-1.6.12-complete.tar.gz) = b881ad2ef448ea9893205fce247a36facaf91891091238128e40f899f9f07f94
-SHA512 (roundcubemail-1.6.12-complete.tar.gz) = b35c4de8220fc85628d6367bcd22b718113e6b649a93bbe7d3a64ef9d43e22fd39c6129f64bb9c541fa2e68fee216433238de8237d638bc7d6204e84670254ac
-Size (roundcubemail-1.6.12-complete.tar.gz) = 5840143 bytes
+BLAKE2s (roundcubemail-1.6.13-complete.tar.gz) = f2b229f19a576b1ac31136ecca2cb197e4af77d81e9ff7f93f7ae2fa8745ade7
+SHA512 (roundcubemail-1.6.13-complete.tar.gz) = 876b1e40aa481cb88bda1540e44fa1e3466e9a16b7e9bfd98040fdea0e2cb3902f4bc95b6cc22401bb25d62c2342b8ba8999218addaa95a682e130877aa3aac5
+Size (roundcubemail-1.6.13-complete.tar.gz) = 5841171 bytes
 SHA1 (patch-config_config.inc.php.sample) = 92a48a97b16fe3f5f4b9441fce762a559d8daca7
 SHA1 (patch-program_include_iniset.php) = 8a6c13c0c87d583ed60e43c01a4173d9d802a6a1
 SHA1 (patch-program_lib_Roundcube_rcube__mime.php) = bfefc6850d3db230dd4224491e895fe25a32e87a

Index: pkgsrc/mail/roundcube-plugin-password/distinfo
diff -u pkgsrc/mail/roundcube-plugin-password/distinfo:1.42 pkgsrc/mail/roundcube-plugin-password/distinfo:1.43
--- pkgsrc/mail/roundcube-plugin-password/distinfo:1.42 Mon Dec 15 14:30:13 2025
+++ pkgsrc/mail/roundcube-plugin-password/distinfo      Sun Feb  8 15:27:25 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.42 2025/12/15 14:30:13 taca Exp $
+$NetBSD: distinfo,v 1.43 2026/02/08 15:27:25 taca Exp $
 
-BLAKE2s (roundcubemail-1.6.12-complete.tar.gz) = b881ad2ef448ea9893205fce247a36facaf91891091238128e40f899f9f07f94
-SHA512 (roundcubemail-1.6.12-complete.tar.gz) = b35c4de8220fc85628d6367bcd22b718113e6b649a93bbe7d3a64ef9d43e22fd39c6129f64bb9c541fa2e68fee216433238de8237d638bc7d6204e84670254ac
-Size (roundcubemail-1.6.12-complete.tar.gz) = 5840143 bytes
+BLAKE2s (roundcubemail-1.6.13-complete.tar.gz) = f2b229f19a576b1ac31136ecca2cb197e4af77d81e9ff7f93f7ae2fa8745ade7
+SHA512 (roundcubemail-1.6.13-complete.tar.gz) = 876b1e40aa481cb88bda1540e44fa1e3466e9a16b7e9bfd98040fdea0e2cb3902f4bc95b6cc22401bb25d62c2342b8ba8999218addaa95a682e130877aa3aac5
+Size (roundcubemail-1.6.13-complete.tar.gz) = 5841171 bytes
 SHA1 (patch-plugins_password_helpers_passwd-expect) = 15e427a3c90bf7c0437a023b3f099abb5a139165