Re: Roundcube 1.1.5 released - security fixes

2016-04-21 Thread Guilhem Moulin
Hey, On Thu, 21 Apr 2016 at 09:08:41 +0200, donoban wrote: > Should we backport some of them to 1.1.4 or, since roundcube is not > official on stable version, can we also upgrade it to 1.1.5? I think it would make more sense to upgrade to 1.1.5 (for jessie-backports too). Unfortunately as far as

Re: Roundcube Webmail 1.4.5

2020-06-03 Thread Guilhem Moulin
Hi Dominic, On Wed, 03 Jun 2020 at 19:53:48 +0100, Dominic Hargreaves wrote: > Do you know what the story is with these vulnerabilities and > stable/oldstable? Roundcube from Buster and Stretch are both affected, see #962123 and #962124. Will prepare debdiffs tonight. Cheers, -- Guilhem. sig