[Pkg-roundcube-maintainers] Bug#1132268: Bug#1131182: roundcube: Multiple security vulnerabilities

Salvatore Bonaccorso carnil at debian.org
Fri Apr 3 16:31:40 BST 2026


Hi Guilhem,

On Fri, Apr 03, 2026 at 09:21:28AM +0200, Guilhem Moulin wrote:
> Control: retitle 1131182 roundcube: CVE-2026-35537 to -35544: Multiple security vulnerabilities
> Control: retitle 1132268 roundcube: CVE-2026-35545: SVG Animate FUNCIRI Attribute Bypass
> 
> CVE IDs have been assigned finally, so I'm updating the debdiffs
> accordingly.  Compared from the previous version there is no code
> change, only d/changelog and d/p/**.patch path names and DEP-3 headers.

Thanks for the updated debdiffs. They look good to me. Can you please
upload your changes to security-master?

Regards,
Salvatore



More information about the Pkg-roundcube-maintainers mailing list