-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Feb 2026 10:55:46 +0100
Source: roundcube
Binary: roundcube roundcube-core roundcube-mysql roundcube-pgsql roundcube-plugins roundcube-sqlite3
Architecture: all
Version: 1.6.13+dfsg-0+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 roundcube  - skinnable AJAX based webmail solution for IMAP servers - metapack
 roundcube-core - skinnable AJAX based webmail solution for IMAP servers
 roundcube-mysql - metapackage providing MySQL dependencies for RoundCube
 roundcube-pgsql - metapackage providing PostgreSQL dependencies for RoundCube
 roundcube-plugins - skinnable AJAX based webmail solution for IMAP servers - plugins
 roundcube-sqlite3 - metapackage providing SQLite dependencies for RoundCube
Closes: 1127447
Changes:
 roundcube (1.6.13+dfsg-0+deb13u1) trixie-security; urgency=high
 .
   * New upstream security and bugfix release (closes: #1127447).
     + Fix CVE-2026-26079: CSS injection vulnerability.
     + Fix CVE-2026-25916: Remote image blocking bypass via SVG content.
   * Refresh d/patches.
Checksums-Sha1:
 675c450d440995c9d1b3975f5ac472d778a587e5 4488436 roundcube-core_1.6.13+dfsg-0+deb13u1_all.deb
 739c4a03582fadf5ed814e8e0bc04bbe09bf1fe2 98736 roundcube-mysql_1.6.13+dfsg-0+deb13u1_all.deb
 e4cf7161fb83df1f583805cdbb1c37f5d37c0a8b 98700 roundcube-pgsql_1.6.13+dfsg-0+deb13u1_all.deb
 6936671590aa91cc21d3295b36769abb3bd39f8f 780792 roundcube-plugins_1.6.13+dfsg-0+deb13u1_all.deb
 910ff8faedd2bc79b1f0c233e3335a4431e19f60 98692 roundcube-sqlite3_1.6.13+dfsg-0+deb13u1_all.deb
 bb1e06eaef2bbb9915c6d0f443c3912c69627219 13919 roundcube_1.6.13+dfsg-0+deb13u1_all-buildd.buildinfo
 dd815c090e08adbf87e6184a159514c65deeeeaf 1292 roundcube_1.6.13+dfsg-0+deb13u1_all.deb
Checksums-Sha256:
 2d232e83e16b863222a22b34c870f99d27b278154f8c54110c2fba0b1cdea2bc 4488436 roundcube-core_1.6.13+dfsg-0+deb13u1_all.deb
 7ecd70b2cfaf615cec44ecab073ce3b983bb6eb6171d581d5acebeb984309537 98736 roundcube-mysql_1.6.13+dfsg-0+deb13u1_all.deb
 d033ba1104292383acfd10eb517c3cb96e1e43d4f842c295d499607444c5ad1b 98700 roundcube-pgsql_1.6.13+dfsg-0+deb13u1_all.deb
 2eb5ccf51957124906dba88a1c8fccf01295d1c469a1e007cd53818158a40352 780792 roundcube-plugins_1.6.13+dfsg-0+deb13u1_all.deb
 677dfd5d308d596f6a8b5b6b57a7d9724869544c0927a6f7525e106a4812dbb1 98692 roundcube-sqlite3_1.6.13+dfsg-0+deb13u1_all.deb
 48488b8b6edffd4edb83523dc06b281d5c574c1809d064714a5b1587fb49e4a3 13919 roundcube_1.6.13+dfsg-0+deb13u1_all-buildd.buildinfo
 9091a2d01a2c14e3d439e8e3d05a061afcc2bb811113c9f3ca12b04f7b61e9ef 1292 roundcube_1.6.13+dfsg-0+deb13u1_all.deb
Files:
 8f738eea77ca1be814559ef35d4da086 4488436 web optional roundcube-core_1.6.13+dfsg-0+deb13u1_all.deb
 ee1c6be2e5b14abc228d4bfa4c746137 98736 web optional roundcube-mysql_1.6.13+dfsg-0+deb13u1_all.deb
 d71cd865dd6c2d50f324914363e9e95d 98700 web optional roundcube-pgsql_1.6.13+dfsg-0+deb13u1_all.deb
 7c8b5090f78d80c046fe867c36ee7bc7 780792 web optional roundcube-plugins_1.6.13+dfsg-0+deb13u1_all.deb
 8c3be6dd6c3946e7332973f4d4a29989 98692 web optional roundcube-sqlite3_1.6.13+dfsg-0+deb13u1_all.deb
 92abe6aa7391912ec507bf7ce43ad766 13919 web optional roundcube_1.6.13+dfsg-0+deb13u1_all-buildd.buildinfo
 b3d771866b0abb2ac5990f1e65b9e891 1292 web optional roundcube_1.6.13+dfsg-0+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=SXlN
-----END PGP SIGNATURE-----