-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 08 Feb 2026 23:50:17 +0100 Source: roundcube Architecture: source Version: 1.6.13+dfsg-1 Distribution: unstable Urgency: high Maintainer: Debian Roundcube Maintainers <[email protected]> Changed-By: Guilhem Moulin <[email protected]> Closes: 1127447 Changes: roundcube (1.6.13+dfsg-1) unstable; urgency=high . * New upstream security and bugfix release (closes: #1127447). + Fix CSS injection vulnerability. + Fix remote image blocking bypass via SVG content. * Remove an obsolete maintscript entry. * Refresh d/patches. * d/control: Remove `Rules-Requires-Root: no`. * Update Standards-Version to 4.7.3. + Remove "Priority: optional" which is the current default and spelling it out is no longer recommended per Policy. Checksums-Sha1: 7710340b35158f40878103d235366bd6d5d81533 3828 roundcube_1.6.13+dfsg-1.dsc 9cffccd7409097cd951c6a301230e712ca30b5ac 126848 roundcube_1.6.13+dfsg.orig-tinymce-langs.tar.xz c841bd314674c7f069eba9d4515046045648f9ac 1928572 roundcube_1.6.13+dfsg.orig-tinymce.tar.xz 6a98b0e3c3015e0e442ef43212f9b51ff43dd0fc 2791584 roundcube_1.6.13+dfsg.orig.tar.xz e5b48a16afdfaa292397e44632b8c8b0e38ffda0 153812 roundcube_1.6.13+dfsg-1.debian.tar.xz c2fbca743c1c25f558397ef04b81666956808864 6282 roundcube_1.6.13+dfsg-1_source.buildinfo Checksums-Sha256: 7bcb619ea4375b968ed80384f80b1ba7ded9c4f326e4bba276746270f59efd4d 3828 roundcube_1.6.13+dfsg-1.dsc 1750888d9f093edf8768a39596d972a05b6486c482d9e8373ddbe4f33478768f 126848 roundcube_1.6.13+dfsg.orig-tinymce-langs.tar.xz 114a0e70e70eeee5ddfa6107b0e510775cf9a8c25da1ff7a7cd6b1937321ea2d 1928572 roundcube_1.6.13+dfsg.orig-tinymce.tar.xz 47ea183831490f041f1a78e8ebd38c6ef81bc960e56bba6e7b052c8844138c27 2791584 roundcube_1.6.13+dfsg.orig.tar.xz 7c022459650701531440a029bc595bdd2713e1798350c72faaeae942c4ec066d 153812 roundcube_1.6.13+dfsg-1.debian.tar.xz 0767921eb6d329a76235aeabdd5ee61f60bd9ac58d1acbabd3f71c0cb944cc2b 6282 roundcube_1.6.13+dfsg-1_source.buildinfo Files: 00c508a0610cdd7ce10f3512bdb05e7d 3828 web optional roundcube_1.6.13+dfsg-1.dsc faeb01ac97252b3d512f14588360c105 126848 web optional roundcube_1.6.13+dfsg.orig-tinymce-langs.tar.xz e01238c32739e21c1395696853cef58d 1928572 web optional roundcube_1.6.13+dfsg.orig-tinymce.tar.xz 94ea1990732667ee07a8760bcf73e26c 2791584 web optional roundcube_1.6.13+dfsg.orig.tar.xz b270dae0cd308079fd415b9dba45d806 153812 web optional roundcube_1.6.13+dfsg-1.debian.tar.xz 75e8494c6f18969b36876b03ffc29464 6282 web optional roundcube_1.6.13+dfsg-1_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmmJGSgACgkQ05pJnDwh pVIn1hAAhHJSd/dtLdrA7OlQgQ/+s5V1Jp4KENZ6xrWNY0CNMx8rwSpQf59+3aDG oLBsK4C3N1sZ2PVnnutn/jQ883QvjXB08Wx6PayUfeDQ9UNwANbKst1Wh5KvmlW7 fzdH0HFkR3rnh1ezAzBNZN5QJnDgtnjgTqrULasYBdpGPPbxTkP+zZrUR/sao2l2 sm2hvW8+yEQbg+wUYLudkMMjPCKl2FqA4ZMiPA/4vAlmgYj6BmgU/b4EhydIItDE Tg7wEGDk77+z4YZpoHQbIES/bn5eRqapNiZ3mBsRJEmmEjb2dbUg+7903ajHZEO9 0aDXYYgEWH5KrAKsIaqoW+r6k3tRmHCDrSTWPsiBMnbFYJQ8HArNFlSH/4Dvi8TZ nVWzL25JvIgqZjWR/gH6sgHGlqbCPsudrqpplUHzJ9mupZGuuVh2vSUUusmDED3J YKPCc+ZqCliocMlMc1ymi8ucoJer8u/cnIJ1bxebXMVDMEiPMS+M91/NYoCz1Ddl TC4kIOp7WAaQ8r49HVRx7ht5QElzIPOefBKjse9/Mz0SwRnNOKBVt55/Ohv2I9Ur Dcobhm8by5t9ll3yTC2rScFdAmSEj6Jlwg2fE7o+pzuanMi7iBC2jDPwkIbmr70r xdB9XpxShkzHUB21y/XXRU7p5uZ8avBMB4sbU0J/Qz36CklwwXc= =nOc3 -----END PGP SIGNATURE-----
pgp_AesGJZR7w.pgp
Description: PGP signature

