Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 10: Security Advisory for Roundcube Webmail - CSRF Issues

fedora
Calendar Grey December 2, 2009
Dist Fedora Esm H88
Stay informed about vulnerabilities in Roundcube Webmail for Fedora users. Learn critical updates, fixes, and essential steps to enhance your email security
Fixes for CVE-2009-4076 and CVE-2009-4077.

Summary

RoundCube Webmail is a browser-based multilingual IMAP client

with an application-like user interface. It provides full

functionality you expect from an e-mail client, including MIME

support, address book, folder manipulation, message searching

and spell checking. RoundCube Webmail is written in PHP and

requires the MySQL database or the PostgreSQL database. The user

interface is fully skinnable using XHTML and CSS 2.

Update Information:

Fixes for CVE-2009-4076 and CVE-2009-4077.

Topics%20covered

Topics Covered

security advisory software update Fedora webmail CSRF

Change Log

* Mon Nov 30 2009 Jon Ciesla = 0.2.2-4 - Fix for CVE-2009-4076 and CVE-2009-4077. * Thu Oct 22 2009 Jon Ciesla = 0.2.2-3 - Macro fix, BZ 530037. * Wed Jul 15 2009 Jon Ciesla = 0.2.2-2 - Incorporated Chris Eveleigh's config changes to fix mimetype bug, BZ 511857. * Wed Jul 1 2009 Jon Ciesla = 0.2.2-1 - New upstream. * Fri Apr 10 2009 Jon Ciesla = 0.2.1-1 - New upstream. * Mon Mar 30 2009 Jon Ciesla = 0.2-9.stable - Patch for PG until php-pear-MDB2 hits 1.5.0 stable. BZ 489505. * Wed Feb 25 2009 Fedora Release Engineering - 0.2-8.stable - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Wed Feb 4 2009 Jon Ciesla = 0.2-7.stable - Patch for CVE-2009-0413, BZ 484052. * Mon Jan 5 2009 Jon Ciesla = 0.2-6.stable - New upstream. - Dropped two most recent patches, applied upstream. * Wed Dec 17 2008 Jon Ciesla = 0.2-5.beta - Security fix, BZ 476830. * Fri Dec 12 2008 Jon Ciesla = 0.2-4.beta - Security fix, BZ 476223.

References


[ 1 ] Bug #541558 - CVE-2009-4076 CVE-2009-4077 RoundCube Webmail: Multiple CSRF flaws https://bugzilla.redhat.com/show_bug.cgi?id=541558

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update roundcubemail' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: roundcubemail
Product: Fedora 10
Version: 0.2.2
Release: 4.fc10
URL: https://roundcube.net/
Summary: Round Cube Webmail is a browser-based multilingual IMAP client

Topics%20covered

Topics Covered

security advisory software update Fedora webmail CSRF

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here