Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 37: FEDORA-2023-be9d60ef35 Moderate: Roundcube XSS Issue

fedora
Calendar Grey September 24, 2023
Dist Fedora Esm H88
The latest release of Roundcube 1.6.3 addresses vulnerabilities related to XSS, eliminates existing bugs, and improves functionalities tailored for Fedora 37 users.
**Release 1.6.3** - Fix bug where installto.sh/update.sh scripts were removing some essential options from the config file (#9051) - Update jQuery-UI to version 1.13.2 (#9041) - Fi...

Summary

RoundCube Webmail is a browser-based multilingual IMAP client

with an application-like user interface. It provides full

functionality you expect from an e-mail client, including MIME

support, address book, folder manipulation, message searching

and spell checking. RoundCube Webmail is written in PHP and

requires a database: MySQL, PostgreSQL and SQLite are known to

work. The user interface is fully skinnable using XHTML and

CSS 2.

Update Information:

**Release 1.6.3** - Fix bug where installto.sh/update.sh scripts were removing some essential options from the config file (#9051) - Update jQuery-UI to version 1.13.2 (#9041) - Fix regression that broke use_secure_urls feature (#9052) - Fix potential PHP fatal error when opening a message with message/rfc822 part (#8953) - Fix bug where a duplicate `` tag in HTML email could cause some parts being cut off (#9029) - Fix bug where a list of folders could have been sorted incorrectly (#9057) - Fix regression where LDAP addressbook 'filter' option was ignored (#9061) - Fix wrong order of a multi- folder search result when sorting by size (#9065) - Fix so install/update scripts do not require PEAR (#9037) - Fix regression where some mail parts could have been decoded incorrectly, or not at all (#9096) - Fix handling of an error case in Cyrus IMAP BINARY FETCH, fallback to non-binary FETCH (#9097) - Fix PHP8 deprecation warning in the reconnect plugin (#9083) - Fix "Show sou...

Change Log

* Fri Sep 15 2023 Remi Collet - 1.6.3-1 - update to 1.6.3

References


[ 1 ] Bug #2239447 - roundcubemail: XSS vulnerability in handling of linkrefs in plain text messages https://bugzilla.redhat.com/show_bug.cgi?id=2239447

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-be9d60ef35' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: roundcubemail
Product: Fedora 37
Version: 1.6.3
Release: 1.fc37
Summary: Round Cube Webmail is a browser-based multilingual IMAP client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here