Attachment 170808 Details for Bug 209841 – Patch roundcube against CVE-2016-5103

[patch] Patch roundcube against CVE-2016-5103

mail_roundcube.patch (text/plain), 1.07 KB, created by VK on 2016-05-29 19:44:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: VK

Created: 2016-05-29 19:44:28 UTC

Size: 1.07 KB

patch

obsolete

>Index: mail/roundcube/Makefile
>===================================================================
>--- mail/roundcube/Makefile	(revision 416121)
>+++ mail/roundcube/Makefile	(working copy)
>@@ -2,6 +2,7 @@
> 
> PORTNAME=	roundcube
> DISTVERSION=	1.1.5
>+PORTREVISION=	1
> PORTEPOCH=	1
> CATEGORIES?=	mail www
> MASTER_SITES=	https://github.com/roundcube/roundcubemail/releases/download/${DISTVERSION}/
>Index: mail/roundcube/files/patch-program_lib_Roundcube_rcube__washtml.php
>===================================================================
>--- mail/roundcube/files/patch-program_lib_Roundcube_rcube__washtml.php	(nonexistent)
>+++ mail/roundcube/files/patch-program_lib_Roundcube_rcube__washtml.php	(working copy)
>@@ -0,0 +1,11 @@
>+--- program/lib/Roundcube/rcube_washtml.php.orig	2016-05-29 19:29:14 UTC
>++++ program/lib/Roundcube/rcube_washtml.php
>+@@ -370,7 +370,7 @@ class rcube_washtml
>+      */
>+     private function is_link_attribute($tag, $attr)
>+     {
>+-        return $tag == 'a' && $attr == 'href';
>++        return ($tag == 'a' || $tag == 'area') && $attr == 'href';
>+     }
>+ 
>+     /**

Flags:

vlad-fbsd: maintainer-approval? (ale)

Actions: View | Diff

Attachments on bug 209841: 170808