commit ce0683b27c29f6f8470744a8d01dd352f6065250
Author: Guilhem Moulin <guilhem@debian.org>
Date: Thu May 28 00:15:03 2026 +0200
d/p/Avoid-dependency-on-new-package-mlocati-ip-lib.patch: Drop type annotations to restore compatibility with PHP<8.
Trixie has PHP8.4 (and Bookworm PHP8.2) so arguably not a big issue, but
best not to break compatibility with older PHPs in a security or -pu
update given Roundcube 1.6 is said to work with PHP ≥7.3.
commit 7728380dabc32ad5791eb475a1fc3f9004312467
Author: Guilhem Moulin <guilhem@debian.org>
Date: Tue May 26 01:14:26 2026 +0200
typofix
commit 358d336145f79d8dad56e6257a77283b365192ec
Author: Guilhem Moulin <guilhem@debian.org>
Date: Mon May 25 22:48:56 2026 +0200
d/changelog: Retroactively mention CVE-2026-48842 to -48849 for 1.6.16+dfsg-1.
Gbp-Dch: Ignore
commit b86f1afefa20c6fdc9998bdb8fb7a1b64824ac8e
Author: Guilhem Moulin <guilhem@debian.org>
Date: Mon May 25 16:28:40 2026 +0200
Improve d/p/Avoid-dependency-on-new-package-mlocati-ip-lib.patch.
Since only the last field value may me >255, the first fields fit in a
single byte and from a trivial regexp check will never exceed
PHP_INT_MAX. Moving the carry-over logic outside the loop so it's
easier to read and understand.
Among the 26 debian patches available in version 1.6.16+dfsg-1 of the package, we noticed the following issues:
Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.
Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/r/roundcube.png){kind=link}