From 22481bab94e38573321be34b908abc41676333a4 Mon Sep 17 00:00:00 2001 From: pp-r <64266134+pp-r@users.noreply.github.com> Date: Tue, 11 Aug 2020 18:32:12 +0200 Subject: [PATCH] Upgrade to upstream version 1.4.8 https://github.com/roundcube/roundcubemail/releases/tag/1.4.8 Fix potential XSS issue in HTML editor of the identity signature input Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145] Fix cross-site scripting (XSS) via HTML messages with malicious math content --- manifest.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.json b/manifest.json index cf05f50..d6d2a7a 100644 --- a/manifest.json +++ b/manifest.json @@ -6,7 +6,7 @@ "en": "Open Source Webmail software", "fr": "Webmail Open Source" }, - "version": "1.4.7~ynh1", + "version": "1.4.8~ynh1", "url": "https://roundcube.net/", "license": "GPL-3.0-only", "maintainer": {