Roundcube 1.3.7 has been released. It's a bug fix release. "It contains fixes to several bugs backported from the master branch including a security fix mitigating the EFAIL issue recently discovered in OpenPGP." These usually work by just renaming the existing ebuild. (Renaming 1.3.6's ebuild worked for me just now locally.) Announcement: https://roundcube.net/news/2018/07/27/update-1.3.7-released Changelog: https://github.com/roundcube/roundcubemail/releases/tag/1.3.7
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8a08aac2e6dcf35ebdabcc3bc42ed24dd064a1f1 commit 8a08aac2e6dcf35ebdabcc3bc42ed24dd064a1f1 Author: Aaron W. Swenson <titanofold@gentoo.org> AuthorDate: 2018-08-06 12:24:28 +0000 Commit: Aaron W. Swenson <titanofold@gentoo.org> CommitDate: 2018-08-06 12:24:28 +0000 mail-client/roundcube: Bump to 1.3.7 Bump to 1.3.7 which addresses EFAIL (https://github.com/roundcube/roundcubemail/issues/6289). (Bug 662716) Add an elog statement that gives the location of the post-upgrade instructions in case the Roundcube update gets buried among many others. (Bug 462250) Make dev-php/PEAR-Net_Socket an optional module, and remove redundant dependencies. (Bug 650792) Remove references to PEAR modules. (Bug 650910) Update POST-INSTALL as step 7 is no longer required since we’re using the complete tarball. (Bug 650912) Bug: https://bugs.gentoo.org/462250 Bug: https://bugs.gentoo.org/650792 Bug: https://bugs.gentoo.org/650910 Bug: https://bugs.gentoo.org/650912 Closes: https://bugs.gentoo.org/662716 Package-Manager: Portage-2.3.40, Repoman-2.3.9 mail-client/roundcube/Manifest | 1 + mail-client/roundcube/files/POST-UPGRADE.txt | 2 - .../roundcube-1.3.7-pear-removed-installed.json | 226 +++++++++++++++++++++ mail-client/roundcube/metadata.xml | 3 + mail-client/roundcube/roundcube-1.3.7.ebuild | 96 +++++++++ 5 files changed, 326 insertions(+), 2 deletions(-)