From nobody Sun Dec 14 09:42:13 2025 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dTdWn6DYGz6JqvY for ; Sun, 14 Dec 2025 09:42:13 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dTdWn5WV9z3HvJ for ; Sun, 14 Dec 2025 09:42:13 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1765705333; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=c0bnc04bjmftnyc+73kDWTruupx3y7w3XRthaxFnnAE=; b=IaaYKE07n0QHe2fTDGUVIIV4A8skak8RImRM03i7prqCaguRY2KCRRAs3ErU+L/XBpcCUJ pkPyr31YZDgqDfASK5WRgOvO0pMtrDKBVNDlEkFho+hcyBFsm77AJFMCDprtHmusOrscH9 MIFN+7FXd/USw9pxSokCfXXuN0yTR6iHFqYeVk2t3yJPKoltg+b+Du4PDhN8Dh3dbWr5Gk mUyIih69/YE+nFRpa4NZpFawoG5mxlY3lCpZSSmgwItwSOplENwX+TBuCbZnxH7Gs9UV3Q 9p+QDD0dXS0GBAmnusc9I7ydYfSPg/BLqX9+0wFq33+y9Ao2zzl1+S0XENaTXg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1765705333; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=c0bnc04bjmftnyc+73kDWTruupx3y7w3XRthaxFnnAE=; b=URYxhnRoPvBaLn8rjAjKasi44P+mqrcBV6uUsIfu5JHWONteiKOv4UdgEJ7dx4DR+dMAT+ b+sgUG2+KInS9M/So/2aSfe42Tb+sjurtU9FA1wAtPoz+CksX33MltPKe9QLh+keknuQA7 y8TDjBCsOkYZ5sXKkKt3EGXh4g2xqsbG7F3FV4gsM2LETI9wkSXpT0bLkiwKiSu9t7fHyk A0xtmTUuSANT24usOVbcqWdLP/SD+q3zMbtg4OsT3JvK9a8DckkfVSezxPxiQecP572ZTY BSdsWMyG4UY/UlYJutbbu33MZhRIDWwc1jqgB3cl1RZK71w5ZLxZwArc3FpATA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1765705333; a=rsa-sha256; cv=none; b=PckBDVXIt7QN22+QYCWuK1gXOkiDLWfeAi2+gd7jRy0xUrYkRmU+5Iz6DK7LR9lbynEcG2 O2/D3gK3NKfVc12FwxsuordkCCmyOxUErjXSo1MjdfmW8/tTOeaes19z8SsMbKds1HedSX WJF7/V2a/lp3SEvTFDX8JiT8hjF55DZ6D5w1QTHzLlLxkHu7KfoSBTWQvw/mOW8PDsYeGz NcBrg2/C2C6CPwboIrC3j/sya3W0Ij013hkvejx1qSx/W5AIfR3EiQRhSaqdvPWBQRIaAM AUEqxJD6luPHrXmnDhg0Oq5tcM6kZQ+YVg+IeAXtt6oFV+8ThMMK7YdFMRmeGA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4dTdWn53bBzC7t for ; Sun, 14 Dec 2025 09:42:13 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 37ca3 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Sun, 14 Dec 2025 09:42:13 +0000 To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Bernard Spil Subject: git: 7a5d088e9fb5 - main - security/vuxml: Document Roundcube vulnerabilitie List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: brnrd X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 7a5d088e9fb5348a0dbab782a5da834420dba90d Auto-Submitted: auto-generated Date: Sun, 14 Dec 2025 09:42:13 +0000 Message-Id: <693e8675.37ca3.16438788@gitrepo.freebsd.org> The branch main has been updated by brnrd: URL: https://cgit.FreeBSD.org/ports/commit/?id=7a5d088e9fb5348a0dbab782a5da834420dba90d commit 7a5d088e9fb5348a0dbab782a5da834420dba90d Author: Bernard Spil AuthorDate: 2025-12-14 09:42:11 +0000 Commit: Bernard Spil CommitDate: 2025-12-14 09:42:11 +0000 security/vuxml: Document Roundcube vulnerabilitie --- security/vuxml/vuln/2025.xml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index a8de633d3221..a93382a51d76 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,29 @@ + + Roundcube -- Multiple vulnerabilities + + + roundcube + 1.6.12,1 + + + + +

The Roundcube project reports:

+
+

Cross-Site-Scripting vulnerability via SVG’s animate tag

+

Information Disclosure vulnerability in the HTML style sanitizer

+
+ + + + https://roundcube.net/news/2025/12/13/security-updates-1.6.12-and-1.5.12 + + + 2025-12-14 + 2025-12-14 + + + github-release-monitor -- multiple vulnerabilities