-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Jul 2020 16:30:57 +0200 Source: roundcube Architecture: source Version: 1.3.14+dfsg.1-1~deb10u1 Distribution: buster-security Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 964355 Changes: roundcube (1.3.14+dfsg.1-1~deb10u1) buster-security; urgency=high . * New upstream release, with security fix for CVE-2020-15562: Cross-Site Scripting (XSS) vulnerability via HTML messages with malicious svg/namespace (Closes: #964355) Checksums-Sha1: 06f8af2b3a1fbfefe24fac353548d708b41b30d8 2487 roundcube_1.3.14+dfsg.1-1~deb10u1.dsc 9292c316c4755d739e58fb44d0a1b9ccc80ca8db 2186068 roundcube_1.3.14+dfsg.1.orig.tar.xz 9d9a5189eb3325a890de6afc62bcd426e24b62f1 3054976 roundcube_1.3.14+dfsg.1-1~deb10u1.debian.tar.xz 16235197f86fc33deb1cddd7d54c6db6a0a725a6 9358 roundcube_1.3.14+dfsg.1-1~deb10u1_amd64.buildinfo Checksums-Sha256: a603158b309c4ef5f4395dd52beb61de6d6b2316862442787c6c258696de6443 2487 roundcube_1.3.14+dfsg.1-1~deb10u1.dsc 3b7a0e2aa1583abc4356bd8a0c0d4ade8191668a388350b3e3f126ab9ab91606 2186068 roundcube_1.3.14+dfsg.1.orig.tar.xz 3c98ae3af17355e7b4c6c71343094f1cad53cf63b83e44d4bbd1775d822b99f3 3054976 roundcube_1.3.14+dfsg.1-1~deb10u1.debian.tar.xz 049cdeedcd123bfe8012d5f41c4b43681d6900e57df2ce424a935cdf6037d6d7 9358 roundcube_1.3.14+dfsg.1-1~deb10u1_amd64.buildinfo Files: f4eb035135d652a58989ab2bd2c06b39 2487 web optional roundcube_1.3.14+dfsg.1-1~deb10u1.dsc 4e11607211da4992bada5991a122a0d2 2186068 web optional roundcube_1.3.14+dfsg.1.orig.tar.xz dd8105e74cf151e2802772851e1a5485 3054976 web optional roundcube_1.3.14+dfsg.1-1~deb10u1.debian.tar.xz dc36959217d77c7917422c7406fd3370 9358 web optional roundcube_1.3.14+dfsg.1-1~deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAl8Edd4ACgkQ05pJnDwh pVJyxg/9HiVKbrwbbsOWEUVqYrpQkrmAwjUSf2B4M+86WENTXpb29wVFCxjmuUQh mpIX6sVDWUVU1veDM76z3AK/0Dwro+d+48YLHdOzzVQZJOmHRT3O7GD8R7WV7MmK icV5qHwYBh5zJXXhcYKaG4PZpwpXJRjfE60ixypNb3Ul4lHXGituR2dEVQiEncn2 CnoQa5hK2d3FHfPNs4Hq6m4VYyL2AKz5/PGpdi3zAxNq30AIgfandDPLI/XwgUS3 Qd3wvfRnoE+Il/abSISOEG5A59WJi/OrnTEbYXEOj8IBG2kEc6wn3Vx7A4rZPQSE /5+WivEdCSrV5TGuH36GifxnnCTLgoWW1zpavYFdaKxEeTl+KcIEd3lH2RjV5F47 cHooNiPjur4KWqTBSIqtSdKIxT92BZFBIssa6XHYpwHp0vU4wHLy+z7E70C36uJm C+e+FyAhV0U20kToUGgxIZ4Zjk+y0dG8fg7mBNaBClblJAd2XcCUG/HJHS+Plvna /9QNj25us/qm9AjHkaAiT09if+pJqDkQQyyy+sWtGvtE541QQchfyeMRHVWRM3ue U2duDWWPPFD5TUMChpSh/KWlgNZ0UAUgf7tezBOJYxCVVokDRwuKkvDsswYgb8gB 2L5WJ/eEnSgwgXmcl8URQJV8F5eU+NlG+MxplvU7ezxRw9gTVqQ= =AEJM -----END PGP SIGNATURE-----