Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

openSUSE: 2023:0285-1 Moderate: Roundcubemail XSS Security Update

opensuse
Calendar Grey October 2, 2023
Dist Opensuse Esm H88
OpenSUSE Security Patch for Roundcubemail: Updates and improvements aimed at addressing concerns, notably a Cross-Site Scripting (XSS) flaw.
An update that contains security fixes can now be installed

Description

This update for roundcubemail fixes the following issues:

Update to 1.6.3 (boo#1215433)

* Fix bug where installto.sh/update.sh scripts were removing some

essential options from the config file (#9051)

* Update jQuery-UI to version 1.13.2 (#9041)

* Fix regression that broke use_secure_urls feature (#9052)

* Fix potential PHP fatal error when opening a message with message/rfc822

part (#8953)

* Fix bug where a duplicate tag in HTML email could cause some

parts being cut off (#9029)

* Fix bug where a list of folders could have been sorted incorrectly

(#9057)

* Fix regression where LDAP addressbook 'filter' option was ignored (#9061)

* Fix wrong order of a multi-folder search result when sorting by size

(#9065)

* Fix so install/update scripts do not require PEAR (#9037)

* Fix regression where some mail parts could have been decoded

incorrectly, or not at all (#9096)

* Fix handling of an error case in Cyrus IMAP...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security update XSS software patch moderate severity openSUSE roundcubemail

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP5:

zypper in -t patch openSUSE-2023-285=1

Package List

- openSUSE Backports SLE-15-SP5 (noarch):

roundcubemail-1.6.3-bp155.2.3.1

References

https://bugzilla.suse.com/1215433

Announcement ID: openSUSE-SU-2023:0285-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP5 .

Topics%20covered

Topics Covered

security advisory security update XSS software patch moderate severity openSUSE roundcubemail

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here