[Pkg-roundcube-maintainers] Bug#1146838: roundcube: Multiple security vulnerabilities

[Guilhem Moulin]

On Sun, 06 Sep 2026 at 11:31:01 +0200, Guilhem Moulin wrote:
> 12. SSRF bypass in Roundcube CSS proxy via hexadecimal IPv6-mapped IPv4
>   addresses
>   https://github.com/roundcube/roundcubemail/commit/05cc67c6bc501e2d818436dec571f9712f16ea61

The Debian package (in all suites) is not affected by that one, because
my patch to avoid the mlocati/ip-lib dependency already handles these
addresses.

-- 
Guilhem.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-roundcube-maintainers/attachments/20260906/4a614589/attachment.sig>