Mageia 7: 2020-0301 Moderate: Roundcubemail XSS Threat Update
mageia
July 31, 2020
This update fixes a recently reported cross-site scripting (XSS) vulnerability via HTML messages with malicious svg/namespace
Summary
This update fixes a recently reported cross-site scripting (XSS) vulnerability via HTML messages with malicious svg/namespace. References: - https://bugs.mageia.org/show_bug.cgi?id=26905
References
- https://bugs.mageia.org/show_bug.cgi?id=26905
- https://github.com/roundcube/roundcubemail/releases/tag/1.3.14
Resolution
SRPMS
- 7/core/roundcubemail-1.3.14-1.mga7
PREVIOUS
NEXT
Publication date: 31 Jul 2020
URL: https://advisories.mageia.org/MGASA-2020-0301.html
Type: security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!