-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 04 Dec 2023 10:16:00 +0100 Source: roundcube Architecture: source Version: 1.4.15+dfsg.1-1~deb11u2~bpo10+1 Distribution: buster-backports Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1055421 Changes: roundcube (1.4.15+dfsg.1-1~deb11u2~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports. * Refresh d/patches. . roundcube (1.4.15+dfsg.1-1~deb11u2) bullseye-security; urgency=high . * Fix CVE-2023-47272: Cross-site scripting (XSS) vulnerability in setting Content-Type/Content-Disposition for attachment preview/download. (Closes: #1055421) Checksums-Sha1: 5d4a313094562fd35ed41f77fb1d7947d35ab4ab 3305 roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1.dsc 64f37e6ee11871ea3fcea87951a139edcc40de46 98972 roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1.debian.tar.xz 0d74c4d5a5e9974b5979f44bddf3605ea5f89ae3 14798 roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1_amd64.buildinfo Checksums-Sha256: d91c8f75135cb2587fc47d1d221b3806fd4b4825d12e198506ff931bca056737 3305 roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1.dsc 559089b6e8ff9f663beee3749a43b2dc2cae6269fa5e96ddaa36fac7226e8d36 98972 roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1.debian.tar.xz d52922d2c843351758fbebd06e86817cbad39e422abba31b9350ab25069e4759 14798 roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1_amd64.buildinfo Files: b29da62f72b344979c4bae95a8de0198 3305 web optional roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1.dsc ada5892f68ad29a391d7469b47dd319d 98972 web optional roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1.debian.tar.xz 0a7a31ad5f67a255c927d2ed916454ca 14798 web optional roundcube_1.4.15+dfsg.1-1~deb11u2~bpo10+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmVtmtMACgkQ05pJnDwh pVIGNxAAq++topt3RW05RlQkeyOItbEIXwOemAaez2psVB34jMYIRcjNYo8eMSE4 enfdye188mtIRCHeC4uEaWVCXWMMvB8xlHKPLIYXwpzCe90KZzLDIowUWXWbDODW 8/3iFUaFjUMqJfzouOB6aFcCJCWOhI02k+9o10V0c5NYULekS4ue6fGoa4BPczzR rvdbmpGEBrJ9+I9xsEZMK8gDbEK04/jnydM0pWLtManELbQSyt9EhiioEqoF0cIP 9goagkFvWqYVFfLGQbhXt314XfCXbo9pKSpe3CN8eCVnxPE2OifLBWFQxv5Bmc+S AKXf73l5cY73PPx36lk8YkSfN4KYyDQ6aIdfu5o8LC837uaHNS0Zkk090Z3HEN5D Op+h/XtWhiT0YQ5Q0d5T42ILl37mTU0BmRJCOhCSrPZr0OUaQpM/G2MoPDt7j1eM y7Vr+TQTHhq1IPFD6X2YCbxZfK2uoFD1BOzqrPwl5WYkSNpCebaVHhoi4agOa/m7 l57Py1NsIC6JgXOMIx9cFnV7XnqpRvnfUMMuo5IUK59V3EUYfyMGUj2HvBIKQ7k2 jpFdQW8jxhmitXfd/y40IOgdR0LpXlknb5Bd5dGd7fWwHSRZ6IwtWlXcwOh5+VGK ZJO+DUJqV9FAY2y3shB7jikrY16/wGbtr4K+Sn5a0xHQj8VIYO4= =XyVq -----END PGP SIGNATURE-----