From e00befd8961d190f55f08203fe07a80a062423cc Mon Sep 17 00:00:00 2001 From: pp-r <64266134+pp-r@users.noreply.github.com> Date: Tue, 11 Aug 2020 18:35:07 +0200 Subject: [PATCH] Upgrade to upstream version 1.4.8 https://github.com/roundcube/roundcubemail/releases/tag/1.4.8 Fix potential XSS issue in HTML editor of the identity signature input Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145] Fix cross-site scripting (XSS) via HTML messages with malicious math content --- conf/app.src | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/conf/app.src b/conf/app.src index 331d73b..8e50e94 100644 --- a/conf/app.src +++ b/conf/app.src @@ -1,5 +1,5 @@ -SOURCE_URL=https://github.com/roundcube/roundcubemail/releases/download/1.4.7/roundcubemail-1.4.7.tar.gz -SOURCE_SUM=72f1d31db27203abb5842ee493ae335f6e4ac421b2ced6fce889c8690eba3bca +SOURCE_URL=https://github.com/roundcube/roundcubemail/releases/download/1.4.8/roundcubemail-1.4.8.tar.gz +SOURCE_SUM=792ff286cf4e12ec26fbcf95619a974f6e03bcc92748ff778738fdbf0d3bc13a SOURCE_SUM_PRG=sha256sum SOURCE_FORMAT=tar.gz SOURCE_IN_SUBDIR=true