-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Jan 2022 23:59:52 +0100 Source: roundcube Architecture: source Version: 1.4.13+dfsg.1-1~deb11u1~bpo10+1 Distribution: buster-backports Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1003027 Changes: roundcube (1.4.13+dfsg.1-1~deb11u1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. . roundcube (1.4.13+dfsg.1-1~deb11u1) bullseye-security; urgency=high . * New security upstream release, with fix for CVE-2021-46144: XSS vulnerability via HTML messages with malicious CSS content (closes: #1003027). * Prepend '<!-- html ignored -->' to the test vector of the above. * Refresh d/patches. Checksums-Sha1: a189eabd0e87422c06e742942eb65468f65fd7bb 3305 roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1.dsc 7cbddea939076c55a12ad8a42bd8e4c53940a533 91952 roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1.debian.tar.xz 3119a3c713035c6dc3977d4218d066e8c90d53a9 14709 roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1_amd64.buildinfo Checksums-Sha256: fbc49852074b366bab40ad6e947c9e68baa584793a5fe1fa928583e8c1aff920 3305 roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1.dsc 717d3c63e4d7c0eec078cd715e2c49833fdf68b298d6bfd8205dfeb9c83fda10 91952 roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1.debian.tar.xz 53932e293a1946f2ddbcea22b3fef3208beb83be990bbb9e197ddc62c4575fae 14709 roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1_amd64.buildinfo Files: 2154c1f20979f3d031433e202f4409a0 3305 web optional roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1.dsc 189bb36e438808360e5c8fda7f9d001e 91952 web optional roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1.debian.tar.xz a59f213ab87bcc77f0634add4f321ebb 14709 web optional roundcube_1.4.13+dfsg.1-1~deb11u1~bpo10+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmHaKgwACgkQ05pJnDwh pVKUoA//e9t7snd8N2yoE4JqXo20uJu3E4RuHAg9bPTaR0uIMzFQZ/RY6OPcjKI2 eycClM3via7SxwUHfs9xHoMUwkrQCzKHaPwOQ+CVk1ckt8OP3C49r0DyBCSUxNTK u3Y74+ISdlaqbKzQsLlzlFno3FD+wQE4l1+R3ZM1j5EqhsyqqSjgtSqsmChqDVEa kwhVCothxds+BA6YJp9847bfNFGtjpGh7VgN90SoLPpNhqxKoIG4TfsigysMkeQh kzqEkP1dUbVi38KBnaTA8XEFru+wlZYc27O43nJbJB4931uzFE26P9gS7y/kyoGJ X/lLUagwJbYjlUc7uKxmFs8/cnSCwOamcRje6IKJ1XlojsCLstP3DpPSVfrmVwuj 8IuV4r3WdJmfu3GbL4xKcL7+sbbFp6COjAXVeeYqHqeRU42PiWqiQt4TKQMG9vqH md1s7g20cUO5+dsx0eroI2mh18JGn7epB5CVn/DwqNEO/jJU9AQLGIbbrYeJjadD 1jAt1FuUak4s11dFfghT5+H6vjXvDxTu+2F5d9es8qs3F8uCN6OeVGWhjFjaDLLV jdAYf1OIcr4lRkzxItce9vXOQsM9O/LjQ4RNM8WANv2FENEKrlaHdcZ6TjFql+6I g5c5ogC1WvGF3JsLbi0uhuTmsuHxFjRDaYF7XC79KrKFY4NvHAA= =VtMi -----END PGP SIGNATURE-----