Hi Guilhem, On Sun, Sep 06, 2026 at 12:20:17PM +0200, Guilhem Moulin wrote: > On Sun, 06 Sep 2026 at 11:31:01 +0200, Guilhem Moulin wrote: > > 12. SSRF bypass in Roundcube CSS proxy via hexadecimal IPv6-mapped IPv4 > > addresses > > > > https://github.com/roundcube/roundcubemail/commit/05cc67c6bc501e2d818436dec571f9712f16ea61 > > The Debian package (in all suites) is not affected by that one, because > my patch to avoid the mlocati/ip-lib dependency already handles these > addresses.
That is every updated version which contain the Avoid-dependency-on-new-package-mlocati-ip-lib.patch patch right? Regards, Salvatore
