Update roundcube to 0.9.5. This release contains fix for CVE-2013-6172.

RELEASE 0.9.5
-------------
- Fix failing vCard import when email address field contains spaces (#1489386)
- Fix default spell-check configuration after Google suspended their spell service
- Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
- Fix iframe onload for upload errors handling (#1489379)
- Fix address matching in Return-Path header on identity selection (#1489374)
- Fix text wrapping issue with long unwrappable lines (#1489371)
- Fixed mispelling: occured -> occurred (#1489366)
- Fixed issues where HTML comments inside style tag would hang Internet Explorer
- Fix setting domain in virtualmin password driver (#1489332)
- Hide Delivery Status Notification option when smtp_server is unset (#1489336)
- Display full attachment name using title attribute when name is too long to display (#1489320)
- Fix attachment icon issue when rare font/language is used (#1489326)
- Fix expanded thread root message styling after refreshing messages list (#1489327)
- Fix issue where From address was removed from Cc and Bcc fields when editing a draft (#1489319)
- Fix error_reporting directive check (#1489323)
- Fix de_DE localization of "About" label in Help plugin (#1489325)

mail/roundcube/Makefile

@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.59 2013/09/13 11:13:49 taca Exp $
+# $NetBSD: Makefile,v 1.60 2013/10/22 03:21:45 taca Exp $
 
-DISTNAME=	roundcubemail-0.9.4-dep
+DISTNAME=	roundcubemail-0.9.5-dep
 PKGNAME=	${DISTNAME:S/mail-/-/:S/-dep//}
 CATEGORIES=	mail
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE:=roundcubemail/}

mail/roundcube/distinfo

@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.33 2013/09/13 11:13:49 taca Exp $
+$NetBSD: distinfo,v 1.34 2013/10/22 03:21:45 taca Exp $
 
-SHA1 (roundcubemail-0.9.4-dep.tar.gz) = 66acb337b422940d7d79ed942a866d238d628960
-RMD160 (roundcubemail-0.9.4-dep.tar.gz) = dc6c2aa2ab5217e130d996bf6dbc522f4a0e3c92
-Size (roundcubemail-0.9.4-dep.tar.gz) = 3410013 bytes
-SHA1 (patch-aa) = 2391f0ddb6b9ba6026f9db6d7050f3412d02e160
+SHA1 (roundcubemail-0.9.5-dep.tar.gz) = 8c9356623321daa401148ac8aeed70765994b474
+RMD160 (roundcubemail-0.9.5-dep.tar.gz) = 4c14c0e241ebe7d7e0bf13247df800526b7e1187
+Size (roundcubemail-0.9.5-dep.tar.gz) = 3410495 bytes
+SHA1 (patch-aa) = a1e2100c5c7e4a94b1cfa1354494af5ddfe3c8fb
 SHA1 (patch-ab) = 19b62d4a24d9b1ccc476f8d3fbe5f386faf6c553
 SHA1 (patch-ac) = 8ab62bdbcce807c76f1929546ade88a128db2fff
 SHA1 (patch-af) = 1f95a7005569207469563aa37ff48da0383b7668

mail/roundcube/patches/patch-aa

@@ -1,10 +1,10 @@
-$NetBSD: patch-aa,v 1.10 2013/06/16 22:04:07 taca Exp $
+$NetBSD: patch-aa,v 1.11 2013/10/22 03:21:45 taca Exp $
 
 Use proper directories for log and temporary.
 
---- config/main.inc.php.dist.orig	2013-06-16 15:12:21.000000000 +0000
+--- config/main.inc.php.dist.orig	2013-10-21 19:39:23.000000000 +0000
 +++ config/main.inc.php.dist
-@@ -205,10 +205,10 @@ $rcmail_config['user_aliases'] = false;
+@@ -207,10 +207,10 @@ $rcmail_config['user_aliases'] = false;
  
  // use this folder to store log files (must be writeable for apache user)
  // This is used by the 'file' log driver.