Accepted roundcube 1.4.8+dfsg.1-1~bpo10+1 (source) into buster-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 14 Aug 2020 12:59:55 +0200
Source: roundcube
Architecture: source
Version: 1.4.8+dfsg.1-1~bpo10+1
Distribution: buster-backports
Urgency: high
Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 968216
Changes:
roundcube (1.4.8+dfsg.1-1~bpo10+1) buster-backports; urgency=medium
.
* Rebuild for buster-backports.
.
roundcube (1.4.8+dfsg.1-1) unstable; urgency=high
.
* New upstream bugfix release, including security fix for CVE-2020-16145:
Cross-site scripting (XSS) vulnerability via HTML messages with malicious
svg or math content. (Closes: #968216)
Checksums-Sha1:
48ce06cd787b9d69c13d97a7960ea82bf43eee21 3110 roundcube_1.4.8+dfsg.1-1~bpo10+1.dsc
e6fd19078b149d00185f99e7f70c10da516bb009 74960 roundcube_1.4.8+dfsg.1-1~bpo10+1.debian.tar.xz
e8f09df3edb30bbad0e63bee2ef2de4eb54fe1db 9858 roundcube_1.4.8+dfsg.1-1~bpo10+1_amd64.buildinfo
Checksums-Sha256:
55bbcb14988b8ae425aa205b2b94cfea4c1829f8e8395f41e4cdfd7a038e0e24 3110 roundcube_1.4.8+dfsg.1-1~bpo10+1.dsc
10a43233e701f4add63cfe3acd54df21e136548777c475ccee28568c4dcd351c 74960 roundcube_1.4.8+dfsg.1-1~bpo10+1.debian.tar.xz
90d6d3f046d4f7da33453c7b8382c0d9cbf443b9d2fcc6e30505fafa39e19678 9858 roundcube_1.4.8+dfsg.1-1~bpo10+1_amd64.buildinfo
Files:
cf71e057730375637b499e5a110a3b0b 3110 web optional roundcube_1.4.8+dfsg.1-1~bpo10+1.dsc
f038fe28b4ce29a7081a2286f3591a63 74960 web optional roundcube_1.4.8+dfsg.1-1~bpo10+1.debian.tar.xz
6926add738e18412d9df580b08a0c814 9858 web optional roundcube_1.4.8+dfsg.1-1~bpo10+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=fCJd
-----END PGP SIGNATURE-----
Reply to: