Skip to content

Commit a2e0ab9

Browse files
author
taca
committed
mail/roundcube: update to 1.6.15
1.6.15 (2026-03-29) This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to some regressions introduced in the previous release as well a recently reported security vulnerability: SVG Animate FUNCIRI Attribute Bypass -- Remote Image Loading via fill/filter/stroke, reported by class_nzm. This version is considered stable and we recommend to update all productive installations of Roundcube 1.6.x with it. Please do backup your data before updating! CHANGELOG * Fix regression where mail search would fail on non-ascii search criteria (#10121) * Fix regression where some data url images could get ignored/lost (#10128) * Fix SVG Animate FUNCIRI Attribute Bypass — Remote Image Loading via fill/filter/stroke
1 parent f154e90 commit a2e0ab9

4 files changed

Lines changed: 11 additions & 12 deletions

File tree

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
1-
$NetBSD: distinfo,v 1.44 2026/03/18 14:58:17 taca Exp $
1+
$NetBSD: distinfo,v 1.45 2026/03/29 14:31:59 taca Exp $
22

3-
BLAKE2s (roundcubemail-1.6.14-complete.tar.gz) = 311e2076bd3343acb18c1f5c93378c3580625f45a6db0a683cfa6d3e0a2f2b76
4-
SHA512 (roundcubemail-1.6.14-complete.tar.gz) = 55e3ee4674ac6257a80577b98295b972609b3a6bbb2d929841101132aa960ccbed56c3ddd127a417eb301433215fe8917c373df19da768b57844e1fadcbda525
5-
Size (roundcubemail-1.6.14-complete.tar.gz) = 5873247 bytes
3+
BLAKE2s (roundcubemail-1.6.15-complete.tar.gz) = 4cca817ff79802fd977c1df23002938feb1eae76eb597d2ed7338e2f61835c08
4+
SHA512 (roundcubemail-1.6.15-complete.tar.gz) = 8c99493c0008a5c498d9ad665881ce2a3d4368affb831e5af36ca65d37e643ba9aded1129ee41c576aa50d5bed2080e80ee7ec5d0f942b0f02fb48c5082f54fe
5+
Size (roundcubemail-1.6.15-complete.tar.gz) = 5872562 bytes
66
SHA1 (patch-plugins_password_helpers_passwd-expect) = 15e427a3c90bf7c0437a023b3f099abb5a139165

mail/roundcube/Makefile

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,7 @@
1-
# $NetBSD: Makefile,v 1.102 2026/03/19 03:55:29 taca Exp $
1+
# $NetBSD: Makefile,v 1.103 2026/03/29 14:31:58 taca Exp $
22

33
DISTNAME= roundcubemail-${RC_VERS}
44
PKGNAME= ${PHP_PKG_PREFIX}-${DISTNAME:S/mail-/-/:S/-complete//}
5-
PKGREVISION= 1
65

76
MAINTAINER= taca@NetBSD.org
87
COMMENT= Browser-based multilingual IMAP client

mail/roundcube/Makefile.common

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# $NetBSD: Makefile.common,v 1.42 2026/03/18 14:58:17 taca Exp $
1+
# $NetBSD: Makefile.common,v 1.43 2026/03/29 14:31:58 taca Exp $
22
#
33
# used by mail/roundcube/Makefile
44
# used by mail/roundcube/plugins.mk
@@ -10,7 +10,7 @@ GITHUB_PROJECT= roundcubemail
1010
GITHUB_RELEASE= ${RC_VERS}
1111
HOMEPAGE= https://roundcube.net/
1212

13-
RC_VERS= 1.6.14
13+
RC_VERS= 1.6.15
1414

1515
USE_LANGUAGES= # none
1616
USE_TOOLS+= pax

mail/roundcube/distinfo

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
1-
$NetBSD: distinfo,v 1.98 2026/03/19 03:53:55 taca Exp $
1+
$NetBSD: distinfo,v 1.99 2026/03/29 14:31:58 taca Exp $
22

3-
BLAKE2s (roundcubemail-1.6.14-complete.tar.gz) = 311e2076bd3343acb18c1f5c93378c3580625f45a6db0a683cfa6d3e0a2f2b76
4-
SHA512 (roundcubemail-1.6.14-complete.tar.gz) = 55e3ee4674ac6257a80577b98295b972609b3a6bbb2d929841101132aa960ccbed56c3ddd127a417eb301433215fe8917c373df19da768b57844e1fadcbda525
5-
Size (roundcubemail-1.6.14-complete.tar.gz) = 5873247 bytes
3+
BLAKE2s (roundcubemail-1.6.15-complete.tar.gz) = 4cca817ff79802fd977c1df23002938feb1eae76eb597d2ed7338e2f61835c08
4+
SHA512 (roundcubemail-1.6.15-complete.tar.gz) = 8c99493c0008a5c498d9ad665881ce2a3d4368affb831e5af36ca65d37e643ba9aded1129ee41c576aa50d5bed2080e80ee7ec5d0f942b0f02fb48c5082f54fe
5+
Size (roundcubemail-1.6.15-complete.tar.gz) = 5872562 bytes
66
SHA1 (patch-config_config.inc.php.sample) = 92a48a97b16fe3f5f4b9441fce762a559d8daca7
77
SHA1 (patch-program_include_iniset.php) = 8a6c13c0c87d583ed60e43c01a4173d9d802a6a1
88
SHA1 (patch-program_lib_Roundcube_rcube__mime.php) = bfefc6850d3db230dd4224491e895fe25a32e87a

0 commit comments

Comments
 (0)