-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Jul 2020 23:57:50 +0200 Source: roundcube Architecture: source Version: 1.4.7+dfsg.1-1 Distribution: unstable Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 964355 Changes: roundcube (1.4.7+dfsg.1-1) unstable; urgency=high . * New upstream bugfix release, including security fixes for: Cross-Site Scripting (XSS) vulnerability via HTML messages with malicious svg/namespace (closes: #964355) Checksums-Sha1: a316525b869175756f4aae1dcc6001b7d8746b27 2479 roundcube_1.4.7+dfsg.1-1.dsc afc64e5946f4787f27947c698b8a511c6ae9a5ba 2934328 roundcube_1.4.7+dfsg.1.orig.tar.xz 96aaca104afbd6209d1197ac3b04517328102384 856028 roundcube_1.4.7+dfsg.1-1.debian.tar.xz 2c961a623e9b5a947db752c9e6cb03c89131d5fe 11115 roundcube_1.4.7+dfsg.1-1_amd64.buildinfo Checksums-Sha256: c1d0dae6da8726ccb9594c450af6a9c5737678cdca0e9ecbaab21ea64bb9b6f0 2479 roundcube_1.4.7+dfsg.1-1.dsc 6939f6a24d9098e9ea44a5c3e2068da439bb118205bb56244d3c00d7ba4cd124 2934328 roundcube_1.4.7+dfsg.1.orig.tar.xz 72e099aa7f78fefa169391a7a759dcd916641d4e39e4d30c1f88751f9a362b5d 856028 roundcube_1.4.7+dfsg.1-1.debian.tar.xz 34a604cd29ee9aa2bae476a40a17b6c4dcb320ffbd8e53961aa649ed85e9c5f0 11115 roundcube_1.4.7+dfsg.1-1_amd64.buildinfo Files: 68ecbf25067c240d167838e4f6b0ee50 2479 web optional roundcube_1.4.7+dfsg.1-1.dsc 44c71657b2df808d045caeaf2a5ebb38 2934328 web optional roundcube_1.4.7+dfsg.1.orig.tar.xz 4093e17d1d0965d186c6da119a472e8a 856028 web optional roundcube_1.4.7+dfsg.1-1.debian.tar.xz 706ab5cafbdc08e2ea8791e351aad4ce 11115 web optional roundcube_1.4.7+dfsg.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAl8CTXIACgkQ05pJnDwh pVIJBA/+N+FpFx+GuE2KuwoHkdtuBMEWH6Uj8QG1XqFJf/n9JO6DdT8DsZVtEF2/ Kgm5UsnW8CQR2kKvKFWWQXJyDuxbEbKVSLDerDaWaf9rnlk8ZvCf9CF0wcvrCYvm 9bkULMccxHH67eOz3UJDRUY/cJKa4fnKY6M35b9uN7GxCw7kMvlIPnsk647M6jcE ckippo4pGv6LifmVLJTG6B/JShNGJFMV/u/+4Lof/Z1b+WQJubnGB6NcxIRQwDjG nY0RwxnW+kph2o09GXum2I7WqLUq+1sR3LhMt1UbsmG7CIesZUCnmnNf6r8wWsem Owft3jequQaSjpjnIzpfHRelN+qcUbxfmKCvyNkNVfiOWi0IrGIdrHqJ2+ezTyrA 88RqLDz33PXcFHppIKRRhnXW02lTbBjudYvAB39smRelzXJuULDE0gE0ZEubPUcc GXwczU56+SQzqr7JXAiuIrIIBRM7NHSWbJ1F1FXy0+W/s5hlkS6H4OV2+aLjlBmd vK9o/5rhTa7ey5WE7PB/4cyZjbD0mGLsIHOlI3FvOf6B63ZLWMDfnbSKa0KPH1nF PSpPeuSsOhjGmcHNewXadMmxy8xs5z7ubqWG2PDz1F76siNzPZ+egbL8PnRiNsmN bQLgJPXg2Tk8+J9Da9UP1WNuWR4vuqrrMTTF82ghodqB1wA4Jks= =Ibbh -----END PGP SIGNATURE-----