[Pkg-roundcube-maintainers] Bug#1151279: roundcube: Multiple security vulnerabilities

[Edmund Lodewijks]

On 2026/10/19 16:22, Guilhem Moulin wrote:
> Source: roundcube
> Version: 1.6.19+dfsg-1
> Control: found -1 1.6.19+dfsg-0+deb13u1
> Control: found -1 1.6.5+dfsg-1+deb12u12
> Severity: important
> Tags: security upstream
> X-Debbugs-Cc: Debian Security Team <team at security.debian.org>
> 
> Roundcube webmail upstream has just released 1.6.20 [0] which fixes a
> new batch of security vulnerabilities:
> ...
> AFAIK no CVE-ID have been published for these issues.  I'm quite busy this week and will
> probably not find time to file MITRE's form before the week-end.

I can help out with filing for CVE ID's, if no objection.

Kind regards,

     Edmund


-- 
Edmund Lodewijks <edmund at proteamail.com>
TZ: UTC+2 / GMT+2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-roundcube-maintainers/attachments/20261019/252ddb8e/attachment-0002.sig>