Accepted roundcube 0.7.2-9+deb7u7 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 07 May 2017 23:12:25 +0200
Source: roundcube
Binary: roundcube-core roundcube roundcube-mysql roundcube-pgsql roundcube-plugins
Architecture: source all
Version: 0.7.2-9+deb7u7
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
roundcube - skinnable AJAX based webmail solution for IMAP servers - metapack
roundcube-core - skinnable AJAX based webmail solution for IMAP servers
roundcube-mysql - metapackage providing MySQL dependencies for RoundCube
roundcube-pgsql - metapackage providing PostgreSQL dependencies for RoundCube
roundcube-plugins - skinnable AJAX based webmail solution for IMAP servers - plugins
Closes: 861388
Changes:
roundcube (0.7.2-9+deb7u7) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2017-8114:
Roundcube Webmail allows arbitrary password resets by authenticated users.
The issue is caused by an improperly restricted exec call in the virtualmin
and sasl drivers of the password plugin. (Closes: #861388)
Checksums-Sha1:
aebe31985bebbb7849c52dfa42a28202976c91ea 2395 roundcube_0.7.2-9+deb7u7.dsc
abb2bf7ab84d540a9354f3277b6a80cacd867c4a 64714 roundcube_0.7.2-9+deb7u7.debian.tar.gz
294997572fa61d1fad6e9f0b6e2ad5fd66fd29dc 1034148 roundcube-core_0.7.2-9+deb7u7_all.deb
1e1c845f57af168c5a4e023eef353c5df692e95e 28716 roundcube_0.7.2-9+deb7u7_all.deb
7dc17fbc9a526ccac7a954b0389664e9747c3c19 28654 roundcube-mysql_0.7.2-9+deb7u7_all.deb
da9085d037dded12ffc82a4b6e3107526de3259a 28654 roundcube-pgsql_0.7.2-9+deb7u7_all.deb
60847932888e591dc834c77ab576aa8f88001bd6 323030 roundcube-plugins_0.7.2-9+deb7u7_all.deb
Checksums-Sha256:
e9c4b64a5380176d4120f1486e3ed5e596a78a71acec0eb5a1f1317a45965a4e 2395 roundcube_0.7.2-9+deb7u7.dsc
754b98c36c141c7c73d848ed24bb15a48113bb6463de68a65e22b10b089df541 64714 roundcube_0.7.2-9+deb7u7.debian.tar.gz
01bd92d137e2873784f2e617a6b2fc610e725ba26cdcadc19d9ef178bd24bdc6 1034148 roundcube-core_0.7.2-9+deb7u7_all.deb
bb1025b46b3ae12889050edc486fd20de92a83589c90190ef7a90cc0b026d8b8 28716 roundcube_0.7.2-9+deb7u7_all.deb
ef62537301877b6e9489b1130548309d1efc97a2bea65943e3f45616005846a7 28654 roundcube-mysql_0.7.2-9+deb7u7_all.deb
9cf2e5068958dc9a86f7d9ea98c2729f4801c2291a16ec08b13c53b0ad97a425 28654 roundcube-pgsql_0.7.2-9+deb7u7_all.deb
778399cb5ff46753554ff45a2419a12fe5db723626d6fb0208623b885cc1ec0a 323030 roundcube-plugins_0.7.2-9+deb7u7_all.deb
Files:
cbdb7773b982fd08489a8a008bb6bb25 2395 web extra roundcube_0.7.2-9+deb7u7.dsc
a48d9f04c5fc33a93ef7efe1622063cb 64714 web extra roundcube_0.7.2-9+deb7u7.debian.tar.gz
df8e1b0c139af47d6e19fc7bc8e04cf1 1034148 web extra roundcube-core_0.7.2-9+deb7u7_all.deb
a0238424d9f8ced487edac05530f4ece 28716 web extra roundcube_0.7.2-9+deb7u7_all.deb
7697031da03c86b5d2ceae3f0c6c2630 28654 web extra roundcube-mysql_0.7.2-9+deb7u7_all.deb
7cf9e2773218264b2eb148de874e1258 28654 web extra roundcube-pgsql_0.7.2-9+deb7u7_all.deb
809afcd6e3c0f6613e2c2b762b3377d7 323030 web extra roundcube-plugins_0.7.2-9+deb7u7_all.deb
-----BEGIN PGP SIGNATURE-----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=WmPE
-----END PGP SIGNATURE-----