[From nobody Mon Mar 30 12:39:07 2026 Received: (at 1132268-close) by bugs.debian.org; 30 Mar 2026 11:37:10 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 96; hammy, 150; neutral, 198; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:37838) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w7Ave-00GOAQ-2a for 1132268-close@bugs.debian.org; Mon, 30 Mar 2026 11:37:10 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w7Ave-004Q8E-1S for 1132268-close@bugs.debian.org; Mon, 30 Mar 2026 11:37:10 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=qMt/OnwtAzdJdNgROsjdFsGTlinczp8LK9URrJJLdGQ=; b=jHsC2C+Ie+SfsvKPmmyNrp2MvV 9ebgKdthsaNAry4uFSASloVpzu08lp80RdqLKKmwv6BNj8GpcEF5f4fgrqgTPWoF0JTMqQavO1+O4 IrzB9LWadv3PSfoUY8W/EfCufLsCFPsukYGmLMlurxP6R5d82h4XG9znWu5lpdQ8g23HxQ+T0I3+I jtFngKAg5A25A5OSxhO2mVpQWJ6LAJM2eDz/xGzgcnaGa6gJTsy+fuN6EkJlmaktNP98SzZC7EPBX QbC3Dxwl7mAoAbBlMiN1rHeBGccIeGO2CMaEYuHU83UbXtx9dCPn2VarOCBVEgEA9zKREX0WHJJGi 42+Fx89g==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w7Avd-00000005FBL-2Jum; Mon, 30 Mar 2026 11:37:09 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Guilhem Moulin <guilhem@debian.org> To: 1132268-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: roundcube Debian: DAK Debian-Changes: roundcube_1.6.15+dfsg-1_source.changes Debian-Source: roundcube Debian-Version: 1.6.15+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1132268: fixed in roundcube 1.6.15+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============3849614784172517206==" Message-Id: <E1w7Avd-00000005FBL-2Jum@fasolo.debian.org> Date: Mon, 30 Mar 2026 11:37:09 +0000 --===============3849614784172517206== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: roundcube Source-Version: 1.6.15+dfsg-1 Done: Guilhem Moulin <guilhem@debian.org> We believe that the bug you reported is fixed in the latest version of roundcube, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1132268@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Guilhem Moulin <guilhem@debian.org> (supplier of updated roundcube package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 09:54:58 +0200 Source: roundcube Architecture: source Version: 1.6.15+dfsg-1 Distribution: unstable Urgency: high Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-li= sts.debian.net> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1132268 Changes: roundcube (1.6.15+dfsg-1) unstable; urgency=3Dhigh . * New upstream security and bugfix release (closes: #1132268). + Fix SVG animate FUNCIRI attribute bypass (remote image loading via fill/filter/stroke). + Fix regression where mail search would fail on non-ascii search criteria. + Fix regression where some data url images could get ignored/lost. * Refresh d/patches and remove those applied upstream. * d/control: Add Build-Depends: node-source-map. * Improve custom patch to avoid dependency on mlocati/ip-lib: + Trim leading zeros from the decimal representation of IPv4 octets to match GuzzleHTTP's mangling of invalid IP addresses. + Treat IPv4-mapped and IPv4-compatible addresses as belonging to the local range when the v4 address is also local. Checksums-Sha1: 89812af8bf73f73b312dcd83fdaff7fb9f70e22d 3845 roundcube_1.6.15+dfsg-1.dsc 0cffaaa8522bb9496ff3ec1aad1b9d17f1e7edd7 126856 roundcube_1.6.15+dfsg.orig-t= inymce-langs.tar.xz 7c3866251bfef08a39b1459b05fb2e99b177a786 1928608 roundcube_1.6.15+dfsg.orig-= tinymce.tar.xz ed576296b8b4da4e49f384344934fb2c6ed4a5dd 2793028 roundcube_1.6.15+dfsg.orig.= tar.xz 5619fcdfb5b17aa6e07d6ca6ba60bee728bce909 156808 roundcube_1.6.15+dfsg-1.debi= an.tar.xz ee561d53e8c92a78f7d43179cf7eab4eb3542f65 6222 roundcube_1.6.15+dfsg-1_source= .buildinfo Checksums-Sha256: b750836f8f47d33313343d5618e2da1158bbc2c78c640db91b2649214a20ad6f 3845 roundc= ube_1.6.15+dfsg-1.dsc f3d8c7e7137dad314b7acff2b80649ea036c4532f3b1194bd39c163d6884416c 126856 roun= dcube_1.6.15+dfsg.orig-tinymce-langs.tar.xz 3040064c9e504486506dc597f3eeec0a79a31278e06d0d15b7c0568938124b0c 1928608 rou= ndcube_1.6.15+dfsg.orig-tinymce.tar.xz b23845f78b4bf5460821d1449f22f2069fa53ccbcc9ed918068549bbc1b651fb 2793028 rou= ndcube_1.6.15+dfsg.orig.tar.xz d52399e01df9f832c3c665889e7af4dfc5bb021a88d93d464484b22c3475fbb5 156808 roun= dcube_1.6.15+dfsg-1.debian.tar.xz 4137f4bec050a1fb6efea12175482c27a2e412b548339b535417e24145b2afa5 6222 roundc= ube_1.6.15+dfsg-1_source.buildinfo Files: d619cf1c80cb906246a99a3c916fb932 3845 web optional roundcube_1.6.15+dfsg-1.d= sc 916486a39ee15f3bd2d10c9472af340c 126856 web optional roundcube_1.6.15+dfsg.o= rig-tinymce-langs.tar.xz 9b7a65d3a402cfbad01a3144b59da634 1928608 web optional roundcube_1.6.15+dfsg.= orig-tinymce.tar.xz 1eca96bad2b14b928e4e62390fd7d3f9 2793028 web optional roundcube_1.6.15+dfsg.= orig.tar.xz f24e472bcdf30b191189aaf9ea9e6cd1 156808 web optional roundcube_1.6.15+dfsg-1= .debian.tar.xz 8aba2564793ad94b677ac3d138e116ea 6222 web optional roundcube_1.6.15+dfsg-1_s= ource.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmnKW5gACgkQ05pJnDwh pVIGixAAh0tgLfzJwlhmkpDG65lvgaGKsmiijXRT5aW7CxWiCse6GMpu4JxjfVtB 6qmpO5oePV5Q6elCInq0LaZSR7aZyQLaH7tzEUv6TCUDRQi2dWj1mlGqMgsFCOxY ERSio8rS/8Iyb0TrEMYiFH59OB8BYvsrYcJE8pk/4SV8YdWSpm1VNNTqe/lA5veP js9RhIGcuBhTqO1sxLpXVnrMGaqFqojZJvpoHfhHPb9lw1NuZ4qyv0WuZ3N/5xNZ 0+dAp/EQySTrhrtnsJnN9AHKWoXFd3kbWtHXD3rNFmHkuI+4eaBeqF7oHLacJr71 ugV8Lvoj3fkfHYlxITIa+NBCoNAfqvn7E3fXGkMb33ahPcHQZVFxRQAlLkMvZVWk +eHxvc2Tb7hemqH4gIeu4zE+s4cA55cogObiN0o64nOKT3RtWKtjzs4fwkIhqYnW hLImfH8L1hvnErlWLfAcW30E7DvmGmseXYCpa8DgXGq/wPaMtRUHM6+IXkz684Om OYLKiRw4OAclfAeGh1kS7TDWRU7jce5gIJh+WHRHEG99Ze3dGvDQv7GNtTX5Q3Uk M2zQuhlts908abwKOxCro2UotrBSEGf+UQiDee414T3z1PDI3ercdZdfT9zBvPup I3zxSUqm3J8qNcGQ8m/cryFeMluauhfp/HIwwm02DDsTYCXDeVs=3D =3DeoLB -----END PGP SIGNATURE----- --===============3849614784172517206== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCacpgZQAKCRCb9qggYcy5 IQOlAP9iw5CAygWkC7hWRyb3+o+Vgv51tpv4auU0XRj1fBCqewEAxjZytDhEKAmQ nQYoIreE7NTUKDq35+yXjXIjjg3O4wc= =SHCN -----END PGP SIGNATURE----- --===============3849614784172517206==-- ]