-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Aug 2020 18:38:40 +0200 Source: roundcube Binary: roundcube-core roundcube roundcube-mysql roundcube-pgsql roundcube-sqlite3 roundcube-plugins Architecture: source Version: 1.2.3+dfsg.1-4+deb9u7 Distribution: stretch-security Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Description: roundcube - skinnable AJAX based webmail solution for IMAP servers - metapack roundcube-core - skinnable AJAX based webmail solution for IMAP servers roundcube-mysql - metapackage providing MySQL dependencies for RoundCube roundcube-pgsql - metapackage providing PostgreSQL dependencies for RoundCube roundcube-plugins - skinnable AJAX based webmail solution for IMAP servers - plugins roundcube-sqlite3 - metapackage providing SQLite dependencies for RoundCube Closes: 968216 Changes: roundcube (1.2.3+dfsg.1-4+deb9u7) stretch-security; urgency=high . * Backport security fix for CVE-2020-16145: Cross-site scripting (XSS) vulnerability via HTML messages with malicious svg or math content. (Closes: #968216) Checksums-Sha1: cf91b08e1e8e39aca71e0961e0ca4c72a9ee4b58 2472 roundcube_1.2.3+dfsg.1-4+deb9u7.dsc 7a444b3e75efa155ec3b42e6e746a4b02fda295d 4448976 roundcube_1.2.3+dfsg.1-4+deb9u7.debian.tar.xz 8a8e831f372e4dc10593793d3143cfe8ad7707a7 9392 roundcube_1.2.3+dfsg.1-4+deb9u7_amd64.buildinfo Checksums-Sha256: 74db66dbffe5063a0b59fc9c79546c27c45c6ae969c157a110306c992c66fce0 2472 roundcube_1.2.3+dfsg.1-4+deb9u7.dsc 5f200b0a0887f3a3a5a0b2c0134dd9f9c88fb0968a2d280a5ac80dc37da7d42b 4448976 roundcube_1.2.3+dfsg.1-4+deb9u7.debian.tar.xz 65912ec0c3cdc3a5e821804e901e7d57c27787bf535807984e3bb5592c97ef76 9392 roundcube_1.2.3+dfsg.1-4+deb9u7_amd64.buildinfo Files: f988bc13ac16d8765ea6719c4cbaf6a5 2472 web extra roundcube_1.2.3+dfsg.1-4+deb9u7.dsc 17ce1165901a8ece1f9dbf786289de07 4448976 web extra roundcube_1.2.3+dfsg.1-4+deb9u7.debian.tar.xz 8a8759830ee9a1952e46e50b0db2a774 9392 web extra roundcube_1.2.3+dfsg.1-4+deb9u7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEz9ERzDttUsU/BH8iLNd4Xt2nsg8FAl8y30UACgkQLNd4Xt2n sg9O8Q//Z4Gq2Ozsir/N4mU3TOBRqRm6FW6JugSBDq6caEHSke5D5Zriguv2BNrO BMhC7j9e1SuUQWa3HAX7gr1kU1DaCOw9Ca4sIBVrmbP78Vm8LnwVNnhgHoeWZ8fo iZ+UgTajGBlw8EnUP9+JYMSLt2H+/0NRoOi3HrXmAVwEjp4eHyErcE0l6xF6nwjk VLOC1WsVimVLLRD8Z/BHl1FWNVDEeLwy3ObCRUz0wzPMCjv6KsWJEeIMs/4bDS50 6ah2GnyZ8Dd89GBv7hLYvBoCH4Mhm9E6nNL1A+0/ryVHyZQDewthKkYTdxUbnLfm GjPPYpfDsPPKB2gOWuxR4xuyue1Gt4twngScdtmbTlJhok1qU4PcX+NRS4zU/eDn zAStAUuQNGGlKM4GzvqGBQicdXDcdDhSPadr+Zh9D8lT3IwOMBeqYARsuRp1gbkn rt4rcjGpdr1Ba4iITWobpz8b3Jy+N4h5qyGSrF9Oq11uXm0PpXmnonApWvMB3PDe NTlKmFjSUbHugmHoQ0t6hP3vCUEY3s05NFVve+6AK5gr2OCR5YaeSoHErroPMtck q0NTepKmPE92WRUqbvUPcb2lp4opax3Ol5Rnr536EhmiIfm8hK7orahKzd2UpK/j LUbSY/J1f6C327H7ul13eGrOdiGTw4gDXQWaPZIghxk7ravgSs8= =U5Gw -----END PGP SIGNATURE-----