[Pkg-roundcube-maintainers] Bug#1151279: roundcube: Multiple security vulnerabilities

[Guilhem Moulin]

On Wed, 21 Oct 2026 at 07:59:06 +0200, Edmund Lodewijks wrote:
>>> AFAIK no CVE-ID have been published for these issues.  I'm quite busy this week and will
>>> probably not find time to file MITRE's form before the week-end.
>>
>> I can help out with filing for CVE ID's, if no objection.
>
> Just as an update: I did file, still waiting for the CVE numbers to be
> assigned.
>
> Will post them here as soon as I have them.

Thank you, much appreciated!  I'll retroactively update d/changelog
after that.  One CVE ID was assigned meanwhile (CVE-2026-113386), I
guess it was requested by the reporter in parallel.

-- 
Guilhem.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-roundcube-maintainers/attachments/20261021/c8c825a8/attachment.sig>