--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2017-c8448d0cad
2017-05-08 14:17:08.814934
--------------------------------------------------------------------------------Name        : roundcubemail
Product     : Fedora 24
Version     : 1.2.5
Release     : 1.fc24
URL         : https://roundcube.net/
Summary     : Round Cube Webmail is a browser-based multilingual IMAP client
Description :
RoundCube Webmail is a browser-based multilingual IMAP client
with an application-like user interface. It provides full
functionality you expect from an e-mail client, including MIME
support, address book, folder manipulation, message searching
and spell checking. RoundCube Webmail is written in PHP and
requires a database: MySQL, PostgreSQL and SQLite are known to
work. The user interface is fully skinnable using XHTML and
CSS 2.

--------------------------------------------------------------------------------Update Information:

**Roundcube Webmail 1.2.5**  This is a security update to the stable version
1.2. It primarily fixes a recently discovered vulnerability in the virtualmin
and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes
from upstream versions. A detailed list of changes is shown below.  It's
considered stable and we recommend to update all productive installations of
Roundcube with this version. Please do backup your data before updating!
CHANGELOG  *    Password: Fix security issue in virtualmin and sasl drivers
[CVE-2017-8114] *    Fix re-positioning of the fixed header of messages list in
Chrome when using minimal mode toggle and About dialog (#5711) *    Fix so
settings/upload.inc could not be used by plugins (#5694) *    Fix regression in
LDAP fuzzy search where it always used prefix search instead (#5713) *    Fix
bug where namespace prefix could not be truncated on folders list if
show_real_foldernames=true (#5695) *    Fix bug where base_dn setting was
ignored inside group_filters (#5720)
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade roundcubemail' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora 24: roundcubemail Security Update 2017-c8448d0cad

May 8, 2017
**Roundcube Webmail 1.2.5** This is a security update to the stable version 1.2

Summary

RoundCube Webmail is a browser-based multilingual IMAP client

with an application-like user interface. It provides full

functionality you expect from an e-mail client, including MIME

support, address book, folder manipulation, message searching

and spell checking. RoundCube Webmail is written in PHP and

requires a database: MySQL, PostgreSQL and SQLite are known to

work. The user interface is fully skinnable using XHTML and

CSS 2.

**Roundcube Webmail 1.2.5** This is a security update to the stable version

1.2. It primarily fixes a recently discovered vulnerability in the virtualmin

and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes

from upstream versions. A detailed list of changes is shown below. It's

considered stable and we recommend to update all productive installations of

Roundcube with this version. Please do backup your data before updating!

CHANGELOG * Password: Fix security issue in virtualmin and sasl drivers

[CVE-2017-8114] * Fix re-positioning of the fixed header of messages list in

Chrome when using minimal mode toggle and About dialog (#5711) * Fix so

settings/upload.inc could not be used by plugins (#5694) * Fix regression in

LDAP fuzzy search where it always used prefix search instead (#5713) * Fix

bug where namespace prefix could not be truncated on folders list if

show_real_foldernames=true (#5695) * Fix bug where base_dn setting was

ignored inside group_filters (#5720)

su -c 'dnf upgrade roundcubemail' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

FEDORA-2017-c8448d0cad 2017-05-08 14:17:08.814934 Product : Fedora 24 Version : 1.2.5 Release : 1.fc24 URL : https://roundcube.net/ Summary : Round Cube Webmail is a browser-based multilingual IMAP client Description : RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in PHP and requires a database: MySQL, PostgreSQL and SQLite are known to work. The user interface is fully skinnable using XHTML and CSS 2. **Roundcube Webmail 1.2.5** This is a security update to the stable version 1.2. It primarily fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes from upstream versions. A detailed list of changes is shown below. It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating! CHANGELOG * Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114] * Fix re-positioning of the fixed header of messages list in Chrome when using minimal mode toggle and About dialog (#5711) * Fix so settings/upload.inc could not be used by plugins (#5694) * Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713) * Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true (#5695) * Fix bug where base_dn setting was ignored inside group_filters (#5720) su -c 'dnf upgrade roundcubemail' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
Product : Fedora 24
Version : 1.2.5
Release : 1.fc24
URL : https://roundcube.net/
Summary : Round Cube Webmail is a browser-based multilingual IMAP client

Related News