Created attachment 183226 [details] Update roundcube to 1.2.5 Please bump roundcube to 1.2.5, patch attached. The new version also fixes CVE-2017-8114. Poudriere build passed (11.0, amd64). Run tested in production for past few weeks.
A commit references this bug: Author: feld Date: Fri Jun 9 18:20:06 UTC 2017 New revision: 443025 URL: https://svnweb.freebsd.org/changeset/ports/443025 Log: Document roundcube vulnerability PR: 219789 Changes: head/security/vuxml/vuln.xml
A commit references this bug: Author: feld Date: Fri Jun 9 18:21:17 UTC 2017 New revision: 443026 URL: https://svnweb.freebsd.org/changeset/ports/443026 Log: mail/roundcube: Update to 1.2.5 PR: 219789 MFH: 2017Q2 Security: CVE-2017-8114 Changes: head/mail/roundcube/Makefile head/mail/roundcube/distinfo
A commit references this bug: Author: feld Date: Fri Jun 9 18:23:19 UTC 2017 New revision: 443027 URL: https://svnweb.freebsd.org/changeset/ports/443027 Log: mail/roundcube: Update to 1.2.5 PR: 219789 Security: CVE-2017-8114 Approved by: ports-secteam (with hat) Changes: _U branches/2017Q2/ branches/2017Q2/mail/roundcube/Makefile branches/2017Q2/mail/roundcube/distinfo
Committed, thanks!