Pullup ticket #4249 - requested by taca
mail/roundcube: security update

Revisions pulled up:
- mail/roundcube/Makefile                                       1.60
- mail/roundcube/distinfo                                       1.34
- mail/roundcube/patches/patch-aa                               1.11

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Oct 22 03:21:45 UTC 2013

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile distinfo
   	pkgsrc/mail/roundcube/patches: patch-aa

   Log Message:
   Update roundcube to 0.9.5.  This release contains fix for CVE-2013-6172.

   RELEASE 0.9.5
   -------------
   - Fix failing vCard import when email address field contains spaces (#1489386)
   - Fix default spell-check configuration after Google suspended their spell service
   - Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
   - Fix iframe onload for upload errors handling (#1489379)
   - Fix address matching in Return-Path header on identity selection (#1489374)
   - Fix text wrapping issue with long unwrappable lines (#1489371)
   - Fixed mispelling: occured -> occurred (#1489366)
   - Fixed issues where HTML comments inside style tag would hang Internet Explorer
   - Fix setting domain in virtualmin password driver (#1489332)
   - Hide Delivery Status Notification option when smtp_server is unset (#1489336)
   - Display full attachment name using title attribute when name is too long to display (#1489320)
   - Fix attachment icon issue when rare font/language is used (#1489326)
   - Fix expanded thread root message styling after refreshing messages list (#1489327)
   - Fix issue where From address was removed from Cc and Bcc fields when editing a draft (#1489319)
   - Fix error_reporting directive check (#1489323)
   - Fix de_DE localization of "About" label in Help plugin (#1489325)