Your message dated Wed, 14 Aug 2024 20:32:37 +0000
with message-id <[email protected]>
and subject line Bug#1078456: fixed in roundcube 1.6.5+dfsg-1+deb12u4
has caused the Debian Bug report #1078456,
regarding roundcube-core: Can't print, rescale or rotate image attachments
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1078456: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1078456
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: roundcube-core
Version: 1.6.8+dfsg-1
Severity: normal
Tags: upstream pending
Control: found -1 1.6.5+dfsg-1+deb12u3
Control: forwarded -1 https://github.com/roundcube/roundcubemail/issues/9571
The upstream fix for CVE-2024-42008 (from 1.6.8 and backported to
1.6.5+dfsg-1+deb12u3)
sets a too restrictive Content-Security-Policy on the attachment preview
page, which breaks printing and other handling of image attachments.
--
Guilhem.
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: roundcube
Source-Version: 1.6.5+dfsg-1+deb12u4
Done: Guilhem Moulin <[email protected]>
We believe that the bug you reported is fixed in the latest version of
roundcube, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guilhem Moulin <[email protected]> (supplier of updated roundcube package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 12 Aug 2024 14:59:59 +0200
Source: roundcube
Architecture: source
Version: 1.6.5+dfsg-1+deb12u4
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Roundcube Maintainers
<[email protected]>
Changed-By: Guilhem Moulin <[email protected]>
Closes: 1078456
Changes:
roundcube (1.6.5+dfsg-1+deb12u4) bookworm-security; urgency=medium
.
* Regression fix: The original fix for CVE-2024-42008 broke printing and
other handling of image attachments. (Closes: #1078456)
Checksums-Sha1:
deee8fd9c8da70a3d3cd690436e48003de263f49 3833
roundcube_1.6.5+dfsg-1+deb12u4.dsc
0390dcf53ac9251a588178bf652efd06eaf52e57 120196
roundcube_1.6.5+dfsg-1+deb12u4.debian.tar.xz
3c60eb2ea730fb59a1a85f8161911f15e1600f58 14215
roundcube_1.6.5+dfsg-1+deb12u4_amd64.buildinfo
Checksums-Sha256:
66d6f3d830e67d161caf17e0587c3f1538116c2fffed99fa3fd3a7fa6d8241ef 3833
roundcube_1.6.5+dfsg-1+deb12u4.dsc
ce5e758b4e5fa4a3c535d2c1ce7dd6d96426260a8b66bddad8e5e2fe228b718d 120196
roundcube_1.6.5+dfsg-1+deb12u4.debian.tar.xz
9dd7e2423c399aaf42830225c5ae57b279ac25f8639f62c1ba06adf810f9fb4a 14215
roundcube_1.6.5+dfsg-1+deb12u4_amd64.buildinfo
Files:
194f8ff1abd1742f8f45f2696c9c07f9 3833 web optional
roundcube_1.6.5+dfsg-1+deb12u4.dsc
2907dde71022b773a18c7f4ed2a87b3c 120196 web optional
roundcube_1.6.5+dfsg-1+deb12u4.debian.tar.xz
09c0df8ac7cf8842d3f2a7da8d3d7f42 14215 web optional
roundcube_1.6.5+dfsg-1+deb12u4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=Zf7m
-----END PGP SIGNATURE-----
pgphVqhdsX_Re.pgp
Description: PGP signature
--- End Message ---
