[Pkg-roundcube-maintainers] 0.7.2-9 missing from the repository (was: roundcube_0.7.2-9_amd64.changes ACCEPTED into unstable)

Jérémy Bobbio lunar at debian.org
Thu Mar 28 09:01:38 UTC 2013


Hi!

Debian FTP Masters:
>  roundcube (0.7.2-9) unstable; urgency=high
>  .
>    * Fix a vulnerability allowing logged users to override any variable
>      which may be used to steal credentials of other users or read
>      arbitrary files.

While trying to check if 0.7.1-1~bpo60+1 was also affected, I noticed
that there was no traces of 0.7.2-8 and 0.7.2-9 in the Git repository.

Vincent, would you have forgotten push the last releases?

Thanks,
-- 
Jérémy Bobbio                        .''`. 
lunar at debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-roundcube-maintainers/attachments/20130328/8f7d12c4/attachment.pgp>


More information about the Pkg-roundcube-maintainers mailing list