Upgrade to upstream version 1.4.8 - Githubissues

YunoHost-Apps / roundcube_ynh

Roundcube package for YunoHost

https://roundcube.net/

GNU Affero General Public License v3.0

11 stars 19 forks source link

Upgrade to upstream version 1.4.8 #90

Closed pp-r closed 3 years ago

pp-r commented 3 years ago

Problem

Fix potential XSS issue in HTML editor of the identity signature input
Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145]
Fix cross-site scripting (XSS) via HTML messages with malicious math content

Solution

Upgrade to upstream version 1.4.8 : https://github.com/roundcube/roundcubemail/releases/tag/1.4.8

PR Status

[ ] Code finished.
[ ] Tested with Package_check.
[ ] Fix or enhancement tested.
[ ] Upgrade from last version tested.
[ ] Can be reviewed and tested.

Validation

Minor decision

Upgrade previous version :
[ ] Code review :
[ ] Approval (LGTM) :
[ ] Approval (LGTM) :
CI succeeded : When the PR is marked as ready to merge, you have to wait for 3 days before really merging it.

pp-r commented 3 years ago

Replace '-NUM-' by 90 the PR number.

kay0u commented 3 years ago

Closed by #92 :+1: