Dear LTS team,
In a recent post roundcube webmail upstream has announced the following
security fix for #978491:
Cross-site scripting (XSS) via HTML or Plain text messages with
malicious content (CVE-2020-35730)
— responsible disclosure from Alex Birnberg
Debdiff tested and attached.
Hi Guilhem,
On Mon, Dec 28, 2020 at 8:28 AM Guilhem Moulin wrote:
> Debdiff tested and attached. I can upload if you'd like but would
> appreciate if you could take care of the DLA :-)
Yes, please. I can take care of the DLA. Please feel free to upload to
stretch-security.
- u