612662 – mail-client/roundcube-1.2.4 version bump

Bug 612662 - mail-client/roundcube-1.2.4 version bump

Summary: mail-client/roundcube-1.2.4 version bump

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Aaron W. Swenson

URL:	https://roundcube.net/news/2017/03/10...
Whiteboard:
Keywords:

Depends on:
Blocks:	CVE-2017-6820
	Show dependency tree

Reported:	2017-03-14 21:23 UTC by Philippe Chaintreuil
Modified:	2017-03-18 13:35 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philippe Chaintreuil 2017-03-14 21:23:47 UTC

Roundcube 1.2.4 has been released.  It's a bug fix release, but does fix "a recently reported security XSS issue with CSS styles inside an SVG tag."  

These traditionally work fine by just renaming the last ebuild.

Changelog: https://github.com/roundcube/roundcubemail/wiki/Changelog#release-124

Comment 1 Philippe Chaintreuil 2017-03-17 23:09:45 UTC

Can confirm: rename of existing ebuild works fine for me.

Comment 2 Thomas Deutschmann (RETIRED) gentoo-dev

2017-03-18 13:35:09 UTC

Now in repository, https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a83a957baa3f709c0fba7e08af6d195d871f30ff