X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=debian%2Fchangelog;h=e3c6c4bd3632bbdd760a9f94cd0a270ec1ededba;hb=5f4f08b22b9e052cd05ea965689c257973c9240b;hp=aded25f10462ef903033ab7f7ba50be75963a74f;hpb=4c4508d948b6c3fc0bb4848e2bf07d1c905ddd5c;p=roundcube.git

diff --git a/debian/changelog b/debian/changelog
index aded25f..e3c6c4b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,17 @@
-roundcube (0.7.2-3) UNRELEASED; urgency=low
+roundcube (0.7.2-5) unstable; urgency=low
+
+  * Fix problem with some uuencoded attachments. Patch from Michał
+    Mirosław. Closes: #686857.
+
+ -- Vincent Bernat <bernat@debian.org>  Sat, 29 Sep 2012 11:30:04 +0200
+
+roundcube (0.7.2-4) unstable; urgency=high
+
+  * Fix self XSS with plain signatures. CVE-2012-3508. Closes: #685475.
+
+ -- Vincent Bernat <bernat@debian.org>  Sun, 26 Aug 2012 14:20:24 +0200
+
+roundcube (0.7.2-3) unstable; urgency=low
 
   * Remove old Replaces/Breaks for roundcube-core since it is not needed
     since Squeeze.