[Pkg-roundcube-maintainers] roundcube: CVE-2020-16145: XSS vulnerability via HTML messages with malicious SVG or math content

Guilhem Moulin guilhem at debian.org
Tue Aug 11 21:39:07 BST 2020


Hi Roberto,

On Tue, 11 Aug 2020 at 14:57:15 -0400, Roberto C. Sánchez wrote:
>>> Dear security team,

Should have been LTS team of course, bad templating from my side :-P

>> I'll take care of it shortly.
>> 
> I have uploaded the updated, published the DLA to the mailing list and
> submitted a Salsa MR for the advisory update on the website.

Many thanks for this!

-- 
Guilhem.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-roundcube-maintainers/attachments/20200811/7c969e5c/attachment.sig>


More information about the Pkg-roundcube-maintainers mailing list