-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Feb 2026 12:05:21 +0100
Source: roundcube
Binary: roundcube roundcube-core roundcube-mysql roundcube-pgsql roundcube-plugins roundcube-sqlite3
Architecture: all
Version: 1.6.5+dfsg-1+deb12u7
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 roundcube  - skinnable AJAX based webmail solution for IMAP servers - metapack
 roundcube-core - skinnable AJAX based webmail solution for IMAP servers
 roundcube-mysql - metapackage providing MySQL dependencies for RoundCube
 roundcube-pgsql - metapackage providing PostgreSQL dependencies for RoundCube
 roundcube-plugins - skinnable AJAX based webmail solution for IMAP servers - plugins
 roundcube-sqlite3 - metapackage providing SQLite dependencies for RoundCube
Closes: 1127447
Changes:
 roundcube (1.6.5+dfsg-1+deb12u7) bookworm-security; urgency=high
 .
   * Cherry pick upstream security fixes from v1.6.13 (closes: #1127447):
     + Fix CVE-2026-26079: CSS injection vulnerability.
     + Fix CVE-2026-25916: Remote image blocking bypass via SVG content.
     + Improve fix for CVE-2025-68460.
Checksums-Sha1:
 a15f36296cbd9ced5858b483b1f61518e92a47dd 4698532 roundcube-core_1.6.5+dfsg-1+deb12u7_all.deb
 82b6b6b83c4aaffe3c23d6095232393ccece3c26 95540 roundcube-mysql_1.6.5+dfsg-1+deb12u7_all.deb
 6e37afdf4eb08bfad633ab8667ef2f6f3cc0854b 95504 roundcube-pgsql_1.6.5+dfsg-1+deb12u7_all.deb
 8b9235c6d1bcf187f0346adb82b6c8e168a6f12f 777212 roundcube-plugins_1.6.5+dfsg-1+deb12u7_all.deb
 e9619e3946924684a454e7ed49a5d28a139bddb7 95488 roundcube-sqlite3_1.6.5+dfsg-1+deb12u7_all.deb
 914942c5623f33d919a4780f4ae69e8c36d6432d 14086 roundcube_1.6.5+dfsg-1+deb12u7_all-buildd.buildinfo
 15115173dd413aa98bbeb8ae954540edcba753e5 1288 roundcube_1.6.5+dfsg-1+deb12u7_all.deb
Checksums-Sha256:
 98bec1f38910e692e96129c7e0160ae90b0e4d33a519c7d0a51f7f61d1cd3ed5 4698532 roundcube-core_1.6.5+dfsg-1+deb12u7_all.deb
 d13a112a95fd9fbff2f36b2a1f2857114f526b5a6e4d66456d1dde9006369311 95540 roundcube-mysql_1.6.5+dfsg-1+deb12u7_all.deb
 f4940706ec74b36b012e62d4442ffff57dc9a7e6bb995c97ceb382d719676bfe 95504 roundcube-pgsql_1.6.5+dfsg-1+deb12u7_all.deb
 3e55ae9fc05f4f27b3667f610b56adcc61f94ed601a759e4aa7ccec17bdee4cd 777212 roundcube-plugins_1.6.5+dfsg-1+deb12u7_all.deb
 daf3d72ada87623186999a1034eb011eed43cae93fa83bb776e4265c58119a3a 95488 roundcube-sqlite3_1.6.5+dfsg-1+deb12u7_all.deb
 bfe7e259f5743be396859ce32e45363fb54954e71e2434569b7c0cb2d09b51c0 14086 roundcube_1.6.5+dfsg-1+deb12u7_all-buildd.buildinfo
 a121fdedfe586b63dc3c166a81a4c1bfb5601110e4aaec623714f9e61ccaaa71 1288 roundcube_1.6.5+dfsg-1+deb12u7_all.deb
Files:
 83b1d27e405eaec19151107ab8027f3f 4698532 web optional roundcube-core_1.6.5+dfsg-1+deb12u7_all.deb
 3071ef083922b681f18fe5dd3e1a6fa8 95540 web optional roundcube-mysql_1.6.5+dfsg-1+deb12u7_all.deb
 5d45d3070fcd50cf175ed132388865c3 95504 web optional roundcube-pgsql_1.6.5+dfsg-1+deb12u7_all.deb
 659e61ea099c8828dd50a0f7a411921d 777212 web optional roundcube-plugins_1.6.5+dfsg-1+deb12u7_all.deb
 bdca92e0043ad286317efdb1d26c3c71 95488 web optional roundcube-sqlite3_1.6.5+dfsg-1+deb12u7_all.deb
 84c31026715cce767d4032bc3e92f88b 14086 web optional roundcube_1.6.5+dfsg-1+deb12u7_all-buildd.buildinfo
 0e5cc222b82323c929d51afefa671c39 1288 web optional roundcube_1.6.5+dfsg-1+deb12u7_all.deb

-----BEGIN PGP SIGNATURE-----
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=wKDm
-----END PGP SIGNATURE-----