[Bug 1256293] [NEW] Please sync roundcube from Debian sid version 0.9.4-1.1 or greater

Fri Nov 29 12:38:03 UTC 2013

*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by David King (amigadave):

Ubuntu 13.10
roundcube 0.9.2-2
Versions below 0.9.3 are affected by CVE 2013-5645, and below version 0.9.5 are affected by CVE 2013-6172 (patched in 0.9.4-1.1).

** Affects: roundcube (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Please sync roundcube from Debian sid version 0.9.4-1.1 or greater
https://bugs.launchpad.net/bugs/1256293
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.