-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 14 Aug 2020 12:59:55 +0200 Source: roundcube Architecture: source Version: 1.4.8+dfsg.1-1~bpo10+1 Distribution: buster-backports Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 968216 Changes: roundcube (1.4.8+dfsg.1-1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. . roundcube (1.4.8+dfsg.1-1) unstable; urgency=high . * New upstream bugfix release, including security fix for CVE-2020-16145: Cross-site scripting (XSS) vulnerability via HTML messages with malicious svg or math content. (Closes: #968216) Checksums-Sha1: 48ce06cd787b9d69c13d97a7960ea82bf43eee21 3110 roundcube_1.4.8+dfsg.1-1~bpo10+1.dsc e6fd19078b149d00185f99e7f70c10da516bb009 74960 roundcube_1.4.8+dfsg.1-1~bpo10+1.debian.tar.xz e8f09df3edb30bbad0e63bee2ef2de4eb54fe1db 9858 roundcube_1.4.8+dfsg.1-1~bpo10+1_amd64.buildinfo Checksums-Sha256: 55bbcb14988b8ae425aa205b2b94cfea4c1829f8e8395f41e4cdfd7a038e0e24 3110 roundcube_1.4.8+dfsg.1-1~bpo10+1.dsc 10a43233e701f4add63cfe3acd54df21e136548777c475ccee28568c4dcd351c 74960 roundcube_1.4.8+dfsg.1-1~bpo10+1.debian.tar.xz 90d6d3f046d4f7da33453c7b8382c0d9cbf443b9d2fcc6e30505fafa39e19678 9858 roundcube_1.4.8+dfsg.1-1~bpo10+1_amd64.buildinfo Files: cf71e057730375637b499e5a110a3b0b 3110 web optional roundcube_1.4.8+dfsg.1-1~bpo10+1.dsc f038fe28b4ce29a7081a2286f3591a63 74960 web optional roundcube_1.4.8+dfsg.1-1~bpo10+1.debian.tar.xz 6926add738e18412d9df580b08a0c814 9858 web optional roundcube_1.4.8+dfsg.1-1~bpo10+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAl82b5kACgkQ05pJnDwh pVL0ExAAwxnjyYJ/oOpLjrwRW9Dy5kXTdoBGnP9I6G67wSsrFfgi4+crd2pKrMtf CVE38knnWvxOGK2Z3kxiW9wbpA1NuZtQx5AXO3NUmLUSDTSZLYxRqzymTia8AlHJ Zx0ot0ia1K3ICeSB6M2sbo6pT6TEWVgY7Kya/GeLdS/V2+nd9ith9h1Yk4PzOllD LhnViM/Dip3jZSzUfcqPF+hHNhnHDypV7NDcYS+MR1iQjQn7t77suZYgjZwkEXKC QbMqxLlU4CeZHKBcBpm5j+uksZMH2KNXjgX8Zx9BcMnUEJL++BYdc89wFzvbRwEJ r16bIDS8oF2YyRAZUcCEAICkCW8PlcHAFOpwqS5DtSRFCIIY7xRVGexE2e3XB+ZE W9oLUmUq1PBJBgtAYcH2MJI+zMgAQKLVzehEQXxuKjussauJSnyGZO+q7PsStJ7q sc/BWGfwFUHPjzn4+N6VeocbUQQoG4MIoiT9zqeYIToqT15BKdZG6L9wLEbJpLep kfvFgrGKFlKiKS8jqVcWdBqydzARfZyYMYVhUF8d2o2tGeNZW3ftMmpFJqKo5IBQ YQuqAFjLAqOaJ1T8pMwinUb7q31eFWkH2UXif5Nkzu+FJYxboFsaxILJbiOZK06q HyuF0ZiyjYkp/BitQGCqaAy/j+chKMM+NbjVWEUXRufqeyTy4NI= =fCJd -----END PGP SIGNATURE-----