Alerts This Week
Warning Icon 1 1,375
Alerts This Week
Warning Icon 1 1,375

Ubuntu 20.04 LTS Roundcube 1.4.3 Regression Fix CVE 2026-0001

ubuntu
Calendar Grey March 18, 2026
Dist Ubuntu Esm H88
Roundcube security fix in Ubuntu 20.04 LTS addresses regression affecting email rendering and XSS.
USN-8097-1 introduced a regression in roundcube

Summary

USN-8097-1 introduced a regression in roundcube

Software Description:

- roundcube: skinnable AJAX based webmail solution for IMAP servers - metapack

Details:

USN-8097-1 fixed a vulnerability in roundcube. The update caused

a regression affecting the HTML sanitizer, preventing Roundcube from rendering

any email message body. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Roundcube Webmail did not properly sanitize the

animate tag within SVG documents. An attacker could possibly use

this issue to cause a cross-site scripting attack.

Topics%20covered

Topics Covered

security advisory cross site scripting Ubuntu regression roundcube html sanitizer

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  roundcube-core                  1.4.3+dfsg.1-1ubuntu0.1~esm7
                                  Available with Ubuntu Pro
  roundcube-plugins               1.4.3+dfsg.1-1ubuntu0.1~esm7
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8097-2

https://ubuntu.com/security/notices/USN-8097-1

https://launchpad.net/bugs/2144682

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8097-2

Topics%20covered

Topics Covered

security advisory cross site scripting Ubuntu regression roundcube html sanitizer

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here