On Sun, 06 Sep 2026 at 11:31:01 +0200, Guilhem Moulin wrote: > 12. SSRF bypass in Roundcube CSS proxy via hexadecimal IPv6-mapped IPv4 > addresses > > https://github.com/roundcube/roundcubemail/commit/05cc67c6bc501e2d818436dec571f9712f16ea61
The Debian package (in all suites) is not affected by that one, because my patch to avoid the mlocati/ip-lib dependency already handles these addresses. -- Guilhem.
signature.asc
Description: PGP signature
