[Pkg-roundcube-maintainers] Bug#1151279: roundcube: Multiple security vulnerabilities

[Edmund Lodewijks]

On 2026/10/19 17:38, Edmund Lodewijks wrote:
> On 2026/10/19 16:22, Guilhem Moulin wrote:
>> Source: roundcube
>> Version: 1.6.19+dfsg-1
>> Control: found -1 1.6.19+dfsg-0+deb13u1
>> Control: found -1 1.6.5+dfsg-1+deb12u12
>> Severity: important
>> Tags: security upstream
>> X-Debbugs-Cc: Debian Security Team <team at security.debian.org>
> ...
>> AFAIK no CVE-ID have been published for these issues.  I'm quite busy this week and will
>> probably not find time to file MITRE's form before the week-end.
> 
> I can help out with filing for CVE ID's, if no objection.

Just as an update: I did file, still waiting for the CVE numbers to be 
assigned.

Will post them here as soon as I have them.

Kind regards,

     Edmund


-- 
Edmund Lodewijks <edmund at proteamail.com>
TZ: UTC+2 / GMT+2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-roundcube-maintainers/attachments/20261021/f809a0ed/attachment-0001.sig>