-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Jul 2020 16:14:59 +0200 Source: roundcube Binary: roundcube-core roundcube roundcube-mysql roundcube-pgsql roundcube-sqlite3 roundcube-plugins Architecture: source Version: 1.2.3+dfsg.1-4+deb9u6 Distribution: stretch Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Description: roundcube - skinnable AJAX based webmail solution for IMAP servers - metapack roundcube-core - skinnable AJAX based webmail solution for IMAP servers roundcube-mysql - metapackage providing MySQL dependencies for RoundCube roundcube-pgsql - metapackage providing PostgreSQL dependencies for RoundCube roundcube-plugins - skinnable AJAX based webmail solution for IMAP servers - plugins roundcube-sqlite3 - metapackage providing SQLite dependencies for RoundCube Closes: 964355 Changes: roundcube (1.2.3+dfsg.1-4+deb9u6) stretch; urgency=high . * Backport security fix for CVE-2020-15562: Cross-Site Scripting (XSS) vulnerability via HTML messages with malicious svg/namespace (Closes: #964355) Checksums-Sha1: 0e9cc557030aa5b927a9b21f98be75afe62cff44 2472 roundcube_1.2.3+dfsg.1-4+deb9u6.dsc 4deeab8c6022d34503df9440b722abf83fb9f714 4447908 roundcube_1.2.3+dfsg.1-4+deb9u6.debian.tar.xz 7d0ecd4c4dc206a7c55a9e3df5dab1ac5f4a00f5 9686 roundcube_1.2.3+dfsg.1-4+deb9u6_amd64.buildinfo Checksums-Sha256: 50b39f18dd54ad864d30b9b6814fff48bd438272a7755656e4c26f19431d8e44 2472 roundcube_1.2.3+dfsg.1-4+deb9u6.dsc e04e52c3486eec37cf9d0c8d5788692ee8ddf7414d05c4ddb4bfad0447bda662 4447908 roundcube_1.2.3+dfsg.1-4+deb9u6.debian.tar.xz cede9af2a9aca89374dffc2aefec580c1e9d1094394990efba2be4f447e9ec5d 9686 roundcube_1.2.3+dfsg.1-4+deb9u6_amd64.buildinfo Files: 7ffacbf11d3f7578c573c6489faeef22 2472 web extra roundcube_1.2.3+dfsg.1-4+deb9u6.dsc 81dd36fb6a1817d1cb67eac79c6b70e7 4447908 web extra roundcube_1.2.3+dfsg.1-4+deb9u6.debian.tar.xz ce75bfb1c70b96244e289ae278b58b2f 9686 web extra roundcube_1.2.3+dfsg.1-4+deb9u6_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAl8EfyYACgkQ05pJnDwh pVJGIRAAguGskOIv2ujhkZGq5Oa0jWfpzrLu+YMTrLh/+hF4u73ranSJxPyC0bVj oLIMPCvFHww43lDO4+L3X5oDwgTe1rI9m4svsK8wGBQyXPHV782gfTTnhBPyxKNv 6/S/uMg/cCg+kdMkfSWn1sOdiw01O4OjT6q7fnfCuaUXvaxP08vCBx2DF7MDH1nB uKT8UQ/RD2DFKf4/RAMaIpSlLal2rw8lhMhs9kkOezVanIH9r0qpB9dhhYEl53fT muOnZI5TfY9bBlZTEcjwRe2J6j/+7TdtmncJGqRs1vil20QASRDWP2QROI/tx4Pj efUjtjB/vIK8A2p1uRmCUF3fUDV4nnQAVPU4EWiEFHwv0/yhgQCQu8S62HgpoH98 Gb6Z1iUSpGDSvZXdt+7e+aVBIpvLWutoFWX1RPqIfBtXwcAlf+GaOhcNZeTCRAOn 2dGEW9Lr2CU/IBkiMPP7xhGHXdhsyXhyBAsiXsAOb0fgQKHJ+r4tadnB3wx/iGIe 8MyVgeKM4EQQpwYtF3HytPMaFx/CHEDeFCAApyIfehDEyWeAOwxhl9Q4vRZTJVRU cM/bEs9P4bz1qi9jdV6w2RjxsfqrFY3ahGdgHtzZUKZhuWjC+qdN8OWxycTTvFqd fAYHdyClLF+xs6uv+NAqyu1zniOrD9djIfNhapgblN2vOTN9xYc= =Kmi+ -----END PGP SIGNATURE-----