[Pkg-roundcube-maintainers] Bug#775576: CVE-2014-9587

[Vincent Bernat]

 ❦ 20 janvier 2015 19:07 +0100, Salvatore Bonaccorso <carnil at debian.org> :

>> I have asked for removal of roundcube from testing to avoid shipping it
>> in Jessie. None of the maintainers can commit to have enough time for
>> security support and the current version is already a bit outdated. I'll
>> try to backport the fix to stable.
>
> Should btw due to this a RC bug be opened in roundcube so that it will
> prevent migration to testing also after the release until more
> maintenance "manpower" can be found?

Yes, I am upgrading the bug about the new upstream version to important.
-- 
Don't diddle code to make it faster - find a better algorithm.
            - The Elements of Programming Style (Kernighan & Plauger)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 818 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-roundcube-maintainers/attachments/20150120/0d13d112/attachment.sig>