[Pkg-roundcube-maintainers] Bug#791643: roundcube: CVE-2015-5381 CVE-2015-5382 CVE-2015-5383

[Salvatore Bonaccorso]

Source: roundcube
Version: 1.1.1+dfsg.1-1
Severity: important
Tags: security upstream fixed-upstream

Hi,

the following vulnerabilities were published for roundcube.

CVE-2015-5381[0]:
XSS vulnerability in _mbox argument

CVE-2015-5382[1]:
security improvement in contact photo handling

CVE-2015-5383[2]:
potential info disclosure from temp directory

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2015-5381
[1] https://security-tracker.debian.org/tracker/CVE-2015-5382
[2] https://security-tracker.debian.org/tracker/CVE-2015-5383

Regards,
Salvatore