On 2026/10/19 16:22, Guilhem Moulin wrote:
Source: roundcube
Version: 1.6.19+dfsg-1
Control: found -1 1.6.19+dfsg-0+deb13u1
Control: found -1 1.6.5+dfsg-1+deb12u12
Severity: important
Tags: security upstream
X-Debbugs-Cc: Debian Security Team <[email protected]>

Roundcube webmail upstream has just released 1.6.20 [0] which fixes a
new batch of security vulnerabilities:
...
AFAIK no CVE-ID have been published for these issues.  I'm quite busy this week 
and will
probably not find time to file MITRE's form before the week-end.

I can help out with filing for CVE ID's, if no objection.

Kind regards,

    Edmund


--
Edmund Lodewijks <[email protected]>
TZ: UTC+2 / GMT+2

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to