Debian 11 Roundcube Important SSRF Info Disclosure Vuln DLA-4517-1

* Georgios Tsimpidas discovered an Server-side request forgery (SSRF)
vulnerability via stylesheet links to a local network hosts.
* An IMAP injection and CSRF bypass vulnerability was found within the
email search logic.
* It was discovered that one could change password without providing
the old one in some situations.
* NULL CATHEDRAL discovered that the HTML sanitizer doesn't sanitize
image sources in SVG `` attributes. This allows attackers
to bypass remote image blocking to track email open action or
potentially bypass access control.
* NULL CATHEDRAL discovered that the HTML sanitizer doesn't sanitize
`` attributes. This allows attackers to bypass
remote image blocking to track email open action or potentially
bypass access control.
* NULL CATHEDRAL discovered that the CSS sanitizer doesn't convert
`position: fixed` `position: absolute` when `!important` is used.
This allows an attacker to mask the Roundcube UI with a fake "session