Accepted roundcube 1.3.13+dfsg.1-1~deb10u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 09 Jun 2020 13:29:14 +0200
Source: roundcube
Architecture: source
Version: 1.3.13+dfsg.1-1~deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 962123 962124
Changes:
roundcube (1.3.13+dfsg.1-1~deb10u1) buster-security; urgency=high
.
* New security upstream release, with fixes for:
- CVE-2020-13964: Cross-Site Scripting (XSS) vulnerability in template
object 'username' (Closes: #962124)
- CVE-2020-13965: Cross-Site Scripting (XSS) vulnerability via malicious
XML messages (Closes: #962123)
Checksums-Sha1:
d78cecebbe15b6688099d37c25e4fae42d54e12c 2487 roundcube_1.3.13+dfsg.1-1~deb10u1.dsc
89a41f790a080416f5b2e28b0d526d0c38dd028b 2186060 roundcube_1.3.13+dfsg.1.orig.tar.xz
5376537824bf60fdd99e421ee44faac2fe91902c 3055184 roundcube_1.3.13+dfsg.1-1~deb10u1.debian.tar.xz
7e38e83bba381dc47c47791730a51c45742ea0e6 9350 roundcube_1.3.13+dfsg.1-1~deb10u1_amd64.buildinfo
Checksums-Sha256:
da214e3c61a5bd0eddb913927b5a713b755c44b28a0aa8841abf70ca48300896 2487 roundcube_1.3.13+dfsg.1-1~deb10u1.dsc
b2493e8d4bcc6c741473a1395b096e07e120901c34581fce76f9d422eca79280 2186060 roundcube_1.3.13+dfsg.1.orig.tar.xz
d8f020f6e32f09e878654e7bf2d0a742365a90d95b407596688b77e3da7db4b1 3055184 roundcube_1.3.13+dfsg.1-1~deb10u1.debian.tar.xz
59f488b877bbfa0fab4f0337cc34a4245559261b9b7b0e53f7e89b7ffe99b99a 9350 roundcube_1.3.13+dfsg.1-1~deb10u1_amd64.buildinfo
Files:
b30c24e7600dce9b52bf1bf66b87f1e7 2487 web optional roundcube_1.3.13+dfsg.1-1~deb10u1.dsc
f3c8dca9029cf85cebad436f9339f1ec 2186060 web optional roundcube_1.3.13+dfsg.1.orig.tar.xz
d42c150152ec6b7668b66b02ae7deeba 3055184 web optional roundcube_1.3.13+dfsg.1-1~deb10u1.debian.tar.xz
af8788c058ee1f59736364e3a1858b78 9350 web optional roundcube_1.3.13+dfsg.1-1~deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=6ZcE
-----END PGP SIGNATURE-----
Reply to: