roundcube vulnerability CVE-2023-5631 not resolved

Bug #2043396 reported by F. Luteijn
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
roundcube (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

For almost four weeks, since October 18th, there is a vulnerability in roundcube, including CVE-2023-5631, and the status still is: needs triage. When will this be solved and will it get a released status so this vulnerability issue will be resolved? In Debian this is bug has been solved long ago. This is taking too long now for a medium priority.

CVE References

Revision history for this message
F. Luteijn (fluteijn) wrote :

Will someone pick this up? This is getting very annoying. Why should I choose for Ubuntu if vulnerability issues are not getting solved, while it is already solved on other distributions.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in roundcube (Ubuntu):
status: New → Confirmed
Achim Bohnet (allee)
tags: added: community-security
Revision history for this message
MPE License Team (licenceubuntu) wrote :

can someone please move this forward? It's 2024 and nothing has happened ...

Revision history for this message
MPE License Team (licenceubuntu) wrote :

Still nothing? What is the problem?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Related questions

Remote bug watches

Bug watches keep track of this bug in other bug trackers.