-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 27 Mar 2013 22:01:25 +0100
Source: roundcube
Binary: roundcube-core roundcube roundcube-mysql roundcube-pgsql roundcube-plugins
Architecture: source all
Version: 0.7.2-9
Distribution: unstable
Urgency: high
Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org>
Changed-By: Vincent Bernat <bernat@debian.org>
Description:
roundcube - skinnable AJAX based webmail solution for IMAP servers - metapack
roundcube-core - skinnable AJAX based webmail solution for IMAP servers
roundcube-mysql - metapackage providing MySQL dependencies for RoundCube
roundcube-pgsql - metapackage providing PostgreSQL dependencies for RoundCube
roundcube-plugins - skinnable AJAX based webmail solution for IMAP servers - plugins
Changes:
roundcube (0.7.2-9) unstable; urgency=high
.
* Fix a vulnerability allowing logged users to override any variable
which may be used to steal credentials of other users or read
arbitrary files.
Checksums-Sha1:
d024da9a237ccda71c9c40b6dc083163d1c978ea 2219 roundcube_0.7.2-9.dsc
8a0d8494cde1763c43db391328c8bce936d7a9e7 53804 roundcube_0.7.2-9.debian.tar.gz
aca8dd455a45809f15b81ae5a0250c1e9beecd57 1027946 roundcube-core_0.7.2-9_all.deb
81e0298b3f38b736b7043bb526f2d051921d9b21 27620 roundcube_0.7.2-9_all.deb
51251ad018fe848260513d6ec3b2e09360fb9920 27562 roundcube-mysql_0.7.2-9_all.deb
1690e1ef446b900f9ee0271c7ee659c6e89821b1 27556 roundcube-pgsql_0.7.2-9_all.deb
e8e979b17a159481a92d9c3f3c83eaa4d120def5 322454 roundcube-plugins_0.7.2-9_all.deb
Checksums-Sha256:
b44d75928aeff256be85ba2bb0675b58bbed94546d2b8758452c782dc19e6972 2219 roundcube_0.7.2-9.dsc
072fe9092369647747820607b53fb883fa1810e81fde71ceb6dca7596b75fd94 53804 roundcube_0.7.2-9.debian.tar.gz
c84aa8261abdf08858b93694e2c8caff7db2f72c0bc69b52374ba6747e209b0e 1027946 roundcube-core_0.7.2-9_all.deb
2a895637dbf9748a5f0d31c4fff07fa026881fd77cfd76297d45530d09907943 27620 roundcube_0.7.2-9_all.deb
af1cda93cf8bdd277c5f54e8e53087a68de3ec9174c9fe623173732adad6d2c2 27562 roundcube-mysql_0.7.2-9_all.deb
dd75750595cf9176184a88561530607a6a8d2bc7ad429e380a858682902c0319 27556 roundcube-pgsql_0.7.2-9_all.deb
bfa39251e4c5efb73216d02affc430b7d8c8577be90bb84f4c78291cea59bf5a 322454 roundcube-plugins_0.7.2-9_all.deb
Files:
2953553ed33f0568761cf81880d53c59 2219 web extra roundcube_0.7.2-9.dsc
35f74a665d721fb64b82892ebb58115e 53804 web extra roundcube_0.7.2-9.debian.tar.gz
51de74ecfd68c06f6c256f1871704824 1027946 web extra roundcube-core_0.7.2-9_all.deb
4a2808c8cc586214694ad71002b90194 27620 web extra roundcube_0.7.2-9_all.deb
11ae754c92038c3256ed942627a71518 27562 web extra roundcube-mysql_0.7.2-9_all.deb
239794496624d3113d1ceb09f3b57e41 27556 web extra roundcube-pgsql_0.7.2-9_all.deb
ad108b25905ba5dd65bc08e41db67bc5 322454 web extra roundcube-plugins_0.7.2-9_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=pqXx
-----END PGP SIGNATURE-----