Hello, regarding #1146838 and the Roundcube 1.6.19 security fixes:
The bug lists both * bookworm: 1.6.5+dfsg-1+deb12u11 * trixie: 1.6.18+dfsg-0+deb13u1 as affected, while the fix in 1.6.19+dfsg-1 has so far reached unstable/testing. Are updates planned for the supported stable releases as well? In particular: * Is a security/LTS update such as 1.6.5+dfsg-1+deb12u12 planned for bookworm? * Is an update for trixie planned, e.g. via trixie-security or a point update? * If so, is there already an approximate plan or package being prepared? I am asking because Roundcube is typically exposed as a public-facing web application, and the Debian security tracker still shows relevant issues as affecting the currently available bookworm/trixie packages. Thank you for any information. Best regards Bjoern
