X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=debian%2Fchangelog;h=e3c6c4bd3632bbdd760a9f94cd0a270ec1ededba;hb=5f4f08b22b9e052cd05ea965689c257973c9240b;hp=baca9f3fedae3fd203cee82d92feee73d13b5178;hpb=6a9b5d3332561973977d03018c496c392f6f4b26;p=roundcube.git

diff --git a/debian/changelog b/debian/changelog
index baca9f3..e3c6c4b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,16 @@
+roundcube (0.7.2-5) unstable; urgency=low
+
+  * Fix problem with some uuencoded attachments. Patch from Michał
+    Mirosław. Closes: #686857.
+
+ -- Vincent Bernat <bernat@debian.org>  Sat, 29 Sep 2012 11:30:04 +0200
+
+roundcube (0.7.2-4) unstable; urgency=high
+
+  * Fix self XSS with plain signatures. CVE-2012-3508. Closes: #685475.
+
+ -- Vincent Bernat <bernat@debian.org>  Sun, 26 Aug 2012 14:20:24 +0200
+
 roundcube (0.7.2-3) unstable; urgency=low
 
   * Remove old Replaces/Breaks for roundcube-core since it is not needed