eaf8a2a299
"In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the unsanitized, user-controlled "_uid" parameter (in an archive.php _task=mail&_mbox=INBOX&_action=plugin.move2archive request) to perform an MX (IMAP) injection attack by placing an IMAP command after a %0d%0a sequence. NOTE: this is less easily exploitable in 1.3.4 and later because of a Same Origin Policy protection mechanism." https://github.com/roundcube/roundcubemail/releases/tag/1.3.6
60 lines
1.6 KiB
Makefile
60 lines
1.6 KiB
Makefile
# $OpenBSD: Makefile,v 1.128 2018/04/11 21:20:40 sthen Exp $
|
|
|
|
COMMENT= imap4 webmail client
|
|
|
|
V= 1.3.6
|
|
DISTNAME= roundcubemail-$V
|
|
PKGNAME= roundcubemail-${V:S/-rc/rc/}
|
|
EXTRACT_SUFX= -complete.tar.gz
|
|
|
|
FIX_EXTRACT_PERMISSIONS= Yes
|
|
|
|
CATEGORIES= mail www
|
|
|
|
HOMEPAGE= http://www.roundcube.net/
|
|
|
|
MAINTAINER= Stuart Henderson <sthen@openbsd.org>
|
|
|
|
# GPLv3+ with exceptions for skins & plugins
|
|
PERMIT_PACKAGE_CDROM= Yes
|
|
|
|
MASTER_SITES= https://github.com/roundcube/roundcubemail/releases/download/$V/
|
|
|
|
NO_BUILD= Yes
|
|
NO_TEST= Yes
|
|
PKG_ARCH= *
|
|
|
|
PREFIX= ${VARBASE}/www
|
|
INSTDIR= ${PREFIX}/roundcubemail
|
|
TINSTDIR= ${TRUEPREFIX}/roundcubemail
|
|
SUBST_VARS= INSTDIR TINSTDIR MODPHP_BIN
|
|
|
|
MODULES= lang/php
|
|
RUN_DEPENDS= lang/php/${MODPHP_VERSION},-pspell \
|
|
lang/php/${MODPHP_VERSION},-zip
|
|
|
|
do-configure:
|
|
cd ${WRKSRC}; ${SUBST_CMD} bin/update.sh bin/installto.sh; \
|
|
sed -i 's,^#! */usr/bin/env php,#!${MODPHP_BIN},' \
|
|
bin/* vendor/pear/crypt_gpg/scripts/crypt-gpg-pinentry \
|
|
vendor/roundcube/plugin-installer/src/bin/rcubeinitdb.sh
|
|
|
|
do-install:
|
|
${INSTALL_DATA_DIR} ${INSTDIR}
|
|
cd ${WRKSRC} && pax -rw .* * ${INSTDIR}
|
|
.for i in .htaccess config/mimetypes.php
|
|
mv ${INSTDIR}/$i ${INSTDIR}/$i.dist
|
|
.endfor
|
|
@${SUBST_CMD} -m 0644 -c ${FILESDIR}/roundcubemail.conf \
|
|
${INSTDIR}/roundcubemail.conf.dist
|
|
mkdir ${INSTDIR}/db; \
|
|
chown -R ${SHAREOWN}:${SHAREGRP} ${INSTDIR}; \
|
|
chgrp -R wheel ${INSTDIR}/bin; \
|
|
chmod -R o-rwx ${INSTDIR}/bin; \
|
|
find ${INSTDIR} \( -name \*.orig -or -name \*.beforesubst -or \
|
|
-name \*.src \) -delete
|
|
find ${INSTDIR} \( -name \*.png -or -name \*.js -or \
|
|
-name \*.css \) -exec chmod -x {} +
|
|
|
|
.include <bsd.port.mk>
|