OoO Vers la fin de l'après-midi du vendredi 10 juillet 2009, vers 16:21,
Benjamin Bannier <be...@netronaut.de> disait :

> I have roundcube 0.1.1.10 installed from backports, and I see people
> exploiting roundcube CVE-2008-5619
> (http://trac.roundcube.net/ticket/1485618).

> Any chances the fix mentioned there could be backported to etch?

Ubuntu has a patch  for this version, so we should be  able to provide a
backport for Etch:
 https://bugs.launchpad.net/ubuntu/+source/roundcube/+bug/316550

However, the  backport is really old and  a lot of bugs  have been fixed
since then. Unfortunately, a more recent roundcube version would require
to backport a lot of dependencies for PHP.

Romain, would you like to apply the mentioned patch to the backport?
-- 
L'avantage du fromage sur les amricains, 
 c'est qu'il y a une culture dedans. 
 -+- MZ in: Guide du Cabaliste Usenet - chapitre 9 - le gros 8 -+-

Attachment: pgpO3tQ89ShRa.pgp
Description: PGP signature

Reply via email to