Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package roundcubemail for openSUSE:Factory checked in at 2021-02-16 09:19:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/roundcubemail (Old) and /work/SRC/openSUSE:Factory/.roundcubemail.new.28504 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "roundcubemail" Tue Feb 16 09:19:30 2021 rev:71 rq:872672 version:1.4.11 Changes: -------- --- /work/SRC/openSUSE:Factory/roundcubemail/roundcubemail.changes 2021-01-30 13:57:45.978396946 +0100 +++ /work/SRC/openSUSE:Factory/.roundcubemail.new.28504/roundcubemail.changes 2021-02-16 09:19:31.923211984 +0100 @@ -1,0 +2,6 @@ +Mon Feb 8 21:26:29 UTC 2021 - Michael Str??der <mich...@stroeder.com> + +- update to 1.4.11 with security fix: + Fix cross-site scripting (XSS) via HTML messages with malicious CSS content + +------------------------------------------------------------------- Old: ---- roundcubemail-1.4.10-complete.tar.gz roundcubemail-1.4.10-complete.tar.gz.asc New: ---- roundcubemail-1.4.11-complete.tar.gz roundcubemail-1.4.11-complete.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ roundcubemail.spec ++++++ --- /var/tmp/diff_new_pack.ZgetFr/_old 2021-02-16 09:19:32.611212933 +0100 +++ /var/tmp/diff_new_pack.ZgetFr/_new 2021-02-16 09:19:32.611212933 +0100 @@ -20,7 +20,7 @@ %define roundcubeconfigpath %{_sysconfdir}/%{name} %define php_name %(php -r "print 'php' . PHP_MAJOR_VERSION;") Name: roundcubemail -Version: 1.4.10 +Version: 1.4.11 Release: 0 Summary: A browser-based multilingual IMAP client License: GPL-3.0-or-later AND GPL-2.0-only AND BSD-3-Clause ++++++ roundcubemail-1.4.10-complete.tar.gz -> roundcubemail-1.4.11-complete.tar.gz ++++++ /work/SRC/openSUSE:Factory/roundcubemail/roundcubemail-1.4.10-complete.tar.gz /work/SRC/openSUSE:Factory/.roundcubemail.new.28504/roundcubemail-1.4.11-complete.tar.gz differ: char 5, line 1