Re: [SECURITY] [DSA 3541-1] roundcube security update

2016-04-05 Thread Paul Wise
On Wed, Apr 6, 2016 at 2:08 AM, donoban wrote: > Of course I would like to help Some links to ways you can help with Debian security: https://security-tracker.debian.org/tracker/data/report https://www.debian.org/security/audit/

Re: [SECURITY] [DSA 3541-1] roundcube security update

2016-04-05 Thread donoban
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/04/16 17:01, Sébastien Delafond wrote: > There are *many* things to be taken care of security-wise in > Debian, but the Security Team will always gladly review "easy" > backports if you find time to provide them. > > Cheers, > > --Seb >

Re: [SECURITY] [DSA 3541-1] roundcube security update

2016-04-05 Thread Sébastien Delafond
On 2016-04-05, donoban wrote: > Why this took so long? Roundcube team fixed this 2015-12-26: > > https://roundcube.net/news/2015/12/26/updates-1.1.4-and-1.0.8-released > > And it also seems a easy fix to backport: > >

Re: [SECURITY] [DSA 3541-1] roundcube security update

2016-04-05 Thread donoban
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05/04/16 10:57, Sebastien Delafond wrote: > - > > Debian Security Advisory DSA-3541-1 secur...@debian.org > https://www.debian.org/security/