[Git][security-tracker-team/security-tracker][master] #1131182/Roundcube: Add link to regression fix for 1.6.x

[Guilhem Moulin (@guilhem)]

Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker


Commits:
29112dbf by Guilhem Moulin at 2026-03-30T14:05:57+02:00
#1131182/Roundcube: Add link to regression fix for 1.6.x

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6756,7 +6756,8 @@ CVE-2026-XXXX [Remote image blocking bypass via a crafted body background attrib
 	- roundcube 1.6.14+dfsg-1 (bug #1131182)
 	NOTE: https://roundcube.net/news/2026/03/18/security-updates-1.7-rc5-1.6.14-1.5.14
 	NOTE: https://nullcathedral.com/posts/2026-03-18-roundcube-round-two-three-more-sanitizer-bypasses/#body-backgrounds-unquoted-url
-	NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/fd0e98178db5c73eaa93d005b561874923f9b0f0
+	NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/fde14d01adc9f37893cd82b635883e516ed453f8 (1.6.14)
+	NOTE: Regression fix: https://github.com/roundcube/roundcubemail/commit/5aba847cb8d5e00a52405e5cd1becb7ec0dcbe4b (1.6.15)
 CVE-2026-XXXX [Remote image blocking bypass via various SVG animate attributes]
 	- roundcube 1.6.14+dfsg-1 (bug #1131182)
 	NOTE: https://roundcube.net/news/2026/03/18/security-updates-1.7-rc5-1.6.14-1.5.14



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/29112dbfa14eb6682396201f498c2a471ab8e59a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/29112dbfa14eb6682396201f498c2a471ab8e59a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260330/c3f84ce5/attachment-0001.htm>