Fedora 43 Roundcube 1.6.13 Important Fix for CSS Injection Issue
fedora
February 20, 2026
Release 1.6.13 Managesieve: Fix handling of string-list format values for date tests in Out of Office (#10075) Fix remote image blocking bypass via SVG content reported by nullcath...
Summary
RoundCube Webmail is a browser-based multilingual IMAP client
with an application-like user interface. It provides full
functionality you expect from an e-mail client, including MIME
support, address book, folder manipulation, message searching
and spell checking. RoundCube Webmail is written in PHP and
requires a database: MySQL, PostgreSQL and SQLite are known to
work. The user interface is fully skinnable using XHTML and
CSS 2.
Update Information:
Release 1.6.13 Managesieve: Fix handling of string-list format values for date tests in Out of Office (#10075) Fix remote image blocking bypass via SVG content reported by nullcathedral Fix CSS injection vulnerability reported by CERT Polska
Topics Covered
Change Log
* Mon Feb 9 2026 Remi Collet
References
[ 1 ] Bug #2438813 - CVE-2026-26079 roundcubemail: Roundcube Webmail: Cascading Style Sheets (CSS) injection via mishandled comments [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2438813
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-547e298156' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Name: roundcubemail
Product: Fedora 43
Version: 1.6.13
Release: 1.fc43
Summary: Round Cube Webmail is a browser-based multilingual IMAP client
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!