-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Jun 2025 10:01:44 +0200
Source: roundcube
Architecture: source
Version: 1.6.5+dfsg-1+deb12u5
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 1107073
Changes:
 roundcube (1.6.5+dfsg-1+deb12u5) bookworm-security; urgency=high
 .
   * Fix CVE-2025-49113: Post-Auth RCE via PHP Object Deserialization.
     (Closes: #1107073)
   * Regression fix: CVE-2024-42009.patch from 1.6.5+dfsg-1+deb12u3 and
     1.6.5+dfsg-1+deb12u4 caused some HTML messages to be displayed unstyled.
Checksums-Sha1:
 854412e0893445d63f49d328fc0cae717886692c 3833 roundcube_1.6.5+dfsg-1+deb12u5.dsc
 a6eadb33c966b2a1ffd12e2c2d4d7c86d579f897 121480 roundcube_1.6.5+dfsg-1+deb12u5.debian.tar.xz
 c7772ecc1bc3b1c61d0dc6c2c6f532f81675e9e4 14465 roundcube_1.6.5+dfsg-1+deb12u5_amd64.buildinfo
Checksums-Sha256:
 266a33fbb1f6b774a50b78d126e3216d9fc8e79eca8e54b3543ba2184e21ee6e 3833 roundcube_1.6.5+dfsg-1+deb12u5.dsc
 2e7dbd5096278134b124f41cba20a9671ca9f846b6866fcbb0f28ca90fa5d0b2 121480 roundcube_1.6.5+dfsg-1+deb12u5.debian.tar.xz
 c06d81d6da8c0289abd9f5e5e9d659d8f4919bab03184e9798a02209430421e5 14465 roundcube_1.6.5+dfsg-1+deb12u5_amd64.buildinfo
Files:
 09d3ba4cbaa3f22f5fdf5291c52d400a 3833 web optional roundcube_1.6.5+dfsg-1+deb12u5.dsc
 9f59eec392779742a1b42772dbcfb88e 121480 web optional roundcube_1.6.5+dfsg-1+deb12u5.debian.tar.xz
 1dbc6feabcb2a24c2aa0f67a935a0db9 14465 web optional roundcube_1.6.5+dfsg-1+deb12u5_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=k4UW
-----END PGP SIGNATURE-----