-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 06 Jan 2022 09:04:44 +0100 Source: roundcube Architecture: source Version: 1.3.17+dfsg.1-1~deb10u2 Distribution: buster-security Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1003027 Changes: roundcube (1.3.17+dfsg.1-1~deb10u2) buster-security; urgency=high . * Backport fix for CVE-2021-46144: Fix cross-site scripting (XSS) via HTML messages with malicious CSS content. (Closes: #1003027) Checksums-Sha1: 0f40e80c8dadf9c3d025aa6016a698c6d51be627 2487 roundcube_1.3.17+dfsg.1-1~deb10u2.dsc 2c50b8e0a389e4f5e9b4c63d6a9fc9ca70925ebd 3055180 roundcube_1.3.17+dfsg.1-1~deb10u2.debian.tar.xz c633c5bc933b914e77580fb6a8d4bcab325843b7 9339 roundcube_1.3.17+dfsg.1-1~deb10u2_amd64.buildinfo Checksums-Sha256: 740e97fc765093232bbcaa7ce7610e1e4647914b0cd96299eb0c6a941333a329 2487 roundcube_1.3.17+dfsg.1-1~deb10u2.dsc 02df78bebf6c6d05591082ca7c7048be2fcd70faf13df0396481fe5ec0969ec5 3055180 roundcube_1.3.17+dfsg.1-1~deb10u2.debian.tar.xz fdd0a30b045c37ebcd66270709d9ed6416bb70c1a6042f956d51719d1e697da3 9339 roundcube_1.3.17+dfsg.1-1~deb10u2_amd64.buildinfo Files: ee26756ff5132fb5aa1a4e84c461b2c1 2487 web optional roundcube_1.3.17+dfsg.1-1~deb10u2.dsc 0f9df581dc5488882e74e62ded4c55ee 3055180 web optional roundcube_1.3.17+dfsg.1-1~deb10u2.debian.tar.xz 1ee433b962c5671e25a33240f39e3d8b 9339 web optional roundcube_1.3.17+dfsg.1-1~deb10u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmHWxRgACgkQ05pJnDwh pVLkgBAAr50Ah/kefUHMcVZw2g11QnXDppIBqG+RW+6w0C0VvZ+nihmIXvXYpUKu mr4e6/hqSlZxTwHNnEZlhsG1dE5z0tA8yZyEccKeYc0EYOCXK9JCeF1H4KLmWAOj YVdoGYQPuacPK+aqjEqFpjAd7x/CnSJXKCwN0hoA+o1UHpBQzGflqTywDxu3krgB mmkr+6v1HfFlew92ido8qALZTOn9xFDS2iIncguutqVwabuvb2ffWHL/FnV44QAh EMqREI74EB0zUwHO9ksVRnw1UKAWfa5isRTuQMFBLfUZRIEVapGnvCIwdZhYpITn LS+3qF5CikbnNpww2M3Dk97Iu1cqfb0jr8RA7kQVSWhzKHDd9qrTHCWyj+2ABPDa 90O5YAJchZjo0teMZXPTRun+n27lC5C7f0DifmRF3rK+hGs2oXl1vyGmue0CtYyl yTu2zNbn2TLHbH5XQhd6LDg7DuFj3NqS3qd+dKR0pvnUWYa15chro+tpjS/snNbc s7SekrE5teKWLC7cyeFql7fP0vwMdbdj+DTe4iP2BS2tKwx9kVpNfv/wVm8ZTcKL 3CE6tY/4kxgg4VhvgBLdKA3IB4jv3BBL2ti4v4M5unY11QN1wiD/a5nf2/kn6Lml qpnW7Pj8Is3LSZcgaGVGnB6EIkBHa2NMb0K8RXyefg8BUfhfT3A= =UH8a -----END PGP SIGNATURE-----