Re: [Kolab-devel] roundcube on obs

Hello hede

when reading the changelogs of the rpm packages in OBS it gets a bit
clearer. 1.4.4.14 in kolab packaging terms means 14 commits head of
1.4.4 directly from the roundcube master branch.

https://obs05.kolabsys.com/package/rdiff/Kolab:16/roundcubemail?linkrev=base&rev=100

btw. jeroen has checked in 1.4.7 2 weeks ago. Usually most packages gets
update every 1-2 months. Mostly roundcubemail due to the active development.

https://obs05.kolabsys.com/package/revisions/Kolab:16/roundcubemail

Regards
Daniel



Am 04.07.2020 um 09:19 schrieb hede:
> On Sat, 4 Jul 2020 08:36:20 +0200 hede <[email protected]> wrote:
> 
>> But, as an example, there's CVE-2020-13964 and CVE-2020-13965. Both were fixed with roundcube 1.4.5 - more than a month ago - and roundcube upstream is on 1.4.6 in the meantime. Quite a large part of roundcube was (and AFAIK still is) done by kolab folks, but kolab is still on version 1.4.4 for now.
> 
> Btw. - where does the file roundcubemail-1.4.4.14.tar.gz within obs.kolabsys.com come from? I cannot find the corresponding repository. It seems not related to git.kolab.org? Nor does it directly get sourced from upstream!?
> 
> Regards 
> hede
> _______________________________________________
> devel mailing list
> [email protected]
> https://lists.kolab.org/mailman/listinfo/devel
>