-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 17 Jun 2024 03:15:26 +0200
Source: roundcube
Architecture: source
Version: 1.6.5+dfsg-1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 1071474
Changes:
 roundcube (1.6.5+dfsg-1+deb12u2) bookworm-security; urgency=high
 .
   * Fix CVE-2024-37384: Cross-site scripting (XSS) vulnerability in handling
     list columns from user preferences. (Closes: #1071474)
   * Fix CVE-2024-37383: Cross-site scripting (XSS) vulnerability in handling
     SVG animate attributes. (Closes: #1071474)
Checksums-Sha1:
 e8cc80b71eec63b0c2b5e7cf27ef41095b848a76 3833 roundcube_1.6.5+dfsg-1+deb12u2.dsc
 511d1e49430325080dee0f0609867a51fcab751c 106828 roundcube_1.6.5+dfsg-1+deb12u2.debian.tar.xz
 2df601443d160f778975f368253fbf10f09339f5 14186 roundcube_1.6.5+dfsg-1+deb12u2_amd64.buildinfo
Checksums-Sha256:
 c6bed34b68f5a2fd74a5c4c64b9bf3a95dc62f5d5fa2e9f605dac9d07cdb21f2 3833 roundcube_1.6.5+dfsg-1+deb12u2.dsc
 3e280f45ad975ccd4c76f906855fd8fefd7002be6e5f9a0ef9840a9d5b867649 106828 roundcube_1.6.5+dfsg-1+deb12u2.debian.tar.xz
 761cebd71c64793cefe4159d6f60c8cbe12145890fa2041ec356708730bbcaef 14186 roundcube_1.6.5+dfsg-1+deb12u2_amd64.buildinfo
Files:
 4c648a484d1ee9ad0977f4055bec949f 3833 web optional roundcube_1.6.5+dfsg-1+deb12u2.dsc
 14ad2cf851fdde3afdbc48bf3684bc43 106828 web optional roundcube_1.6.5+dfsg-1+deb12u2.debian.tar.xz
 798b6b0dca335cac47318759530cb99d 14186 web optional roundcube_1.6.5+dfsg-1+deb12u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=GvvK
-----END PGP SIGNATURE-----