-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 18 Dec 2019 00:26:48 +0100 Source: roundcube Architecture: source Version: 1.3.10+dfsg.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org> Changed-By: Beowulf <beowulf@netzguerilla.net> Closes: 897014 898068 918126 923142 927713 Changes: roundcube (1.3.10+dfsg.1-1) unstable; urgency=medium . * New upstream release: (Closes: #927713) - Fixes CVE-2019-10740 . [ Guilhem Moulin ] * Backport fix for CVE-2018-1000071: Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. https://github.com/roundcube/roundcubemail/issues/6173 (Closes: #897014) * New upstream release (1.3.9). (Closes: #898068) * d/roundcube-core.config: Honor debconf setting roundcube/language, by skipping the relevant part at pre-configure stage. (Closes: #923142) * d/roundcube-core.postinst: Create temporary configuration file atomically. * d/upstream/signing-key.asc: Minimize OpenPGP certificate. * Add new plugins to roundcube-plugins: 'attachment_reminder' (closes: #918126), 'example_addressbook', 'identicon', 'identity_select' and 'redundant_attachments'. * d/control: Bump Standards-Version to 4.3.0 (no changes needed). Checksums-Sha1: 43fa63523cc1ff8066ba47f21494cfed2369c74d 2480 roundcube_1.3.10+dfsg.1-1.dsc e90754f1ed9d2195bef1d1faea5c338b300bc20a 2185372 roundcube_1.3.10+dfsg.1.orig.tar.xz 7388b896dd65013911ab3c7f56791ae028826109 3053916 roundcube_1.3.10+dfsg.1-1.debian.tar.xz 4e22bf0626b77cba96bed3bc458a4fad4b6cfe6b 9429 roundcube_1.3.10+dfsg.1-1_source.buildinfo Checksums-Sha256: 01318705b13d631ce74e921327f023ff057ae85ef43b05714457ad368d2b606f 2480 roundcube_1.3.10+dfsg.1-1.dsc 8ca8734569af59ee4caca769a47572ef3cc553bd8a1683922137b82c486e4dcb 2185372 roundcube_1.3.10+dfsg.1.orig.tar.xz 41662b710c13940234f33cfc73a79d80e7398b2babc6297630f78eec57215eae 3053916 roundcube_1.3.10+dfsg.1-1.debian.tar.xz 0d7ad785d16961ddb77c6538d24a6573a99fd9c9d8bb1a35595e0c9b81d4008d 9429 roundcube_1.3.10+dfsg.1-1_source.buildinfo Files: f1ec3fc9a06f6295f6470e3a65dc927e 2480 web optional roundcube_1.3.10+dfsg.1-1.dsc a2727cb5b5d2646eaea430aea1bb204e 2185372 web optional roundcube_1.3.10+dfsg.1.orig.tar.xz f88daa63a11ebbd32ca26d8077d7c449 3053916 web optional roundcube_1.3.10+dfsg.1-1.debian.tar.xz 9e00b2160cc6d66b7a7c825c674259e2 9429 web optional roundcube_1.3.10+dfsg.1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEOewRoCAWtykmSRoG462wCFBgVjYFAl35anARHGhlZmVlQGRl Ymlhbi5vcmcACgkQ462wCFBgVjah+Q//fOxBJMOusuQF+Qib8AkaHrHFnNVMtoRt 02ntimphuEDwNz2/4K03AKprerZ/6WtJuc7zJnqSs+CAFINVKio3vPV8OGOTvXUq oTa/Z1EELDaSCp4NvIDanlFmLvm6MOfxWIvSEMt4vwSKq7WuFNBepPcxj1K7Y7jt R3nxLTiPp8ZM3PD2KgOkpeURjnSmFrENFJhjs8OamOV7E8o/tpMZkc4tBo68ZRwB hsjyyhGnozAk0p8HPsTvLPZC8FhWeRwZXxdFjstgbeCcZ3Mxhdo1zm6UeaH7LIgM Q3eQsqSoOV4zw7EKRFxVFPGE4TAWiTdqqGmK55DrGVXyCrMkyDWxikTlDk7gWcr/ HKPdsGOBklDQKDwruZOeYSQtlB0Guh6ItGoo4xhsB7JgIzSpNhA6sL2twMIMaor0 DMmtssCU2DA3rSCnKVkrmV5tOQBiblwWlfWQxwDG/MJiNrzxtSC7FFmZ5y3Az8SL mfUigaLIh4O6lA11E+dGVe/kJtsm1YTTF2sIFybIkpy3fxSmptGvvqW9R7Yj/fZH u/0z1QsdOHl2AEI1VHUCoEnlWmZqhS6gpQ2RwEneF5l+kh6wtDeaxHuHK9VW210x 6SdbJzb19K5/vq7EZmZ3a1/16cTQDlLcnBlzmN7wRiOeguQcSBTtp/rHitqsc6lx xTOCu6XKMuQ= =e/r+ -----END PGP SIGNATURE-----
