Stay Secure with the Latest Linux Advisories

security advisorymoderateroundcubemail

Ubuntu 22.04: 2023-4bde48f8b3 Critical: Nextcloud Security Update

**Version 1.6.4** - Fix PHP8 warnings (#9142, #9160) - Fix default 'mime.types' path on Windows (#9113) - Managesieve: Fix javascript error when relational or spamtest extension is not enabled (#9139) - Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-735ee6d4e1 2023-11-03 18:20:20.954915 -------------------------------------------------------------------------------- Name : roundcubemail Product : Fedora 39 Version : 1.6.4 Release : 1.fc39 URL : https://roundcube.net/ Summary : Round Cube Webmail is a browser-based multilingual IMAP client Description : RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in PHP and requires a database: MySQL, PostgreSQL and SQLite are known to work. The user interface is fully skinnable using XHTML and CSS 2. -------------------------------------------------------------------------------- Update Information: **Version 1.6.4** - Fix PHP8 warnings (#9142, #9160) - Fix default 'mime.types' path on Windows (#9113) - Managesieve: Fix javascript error when relational or spamtest extension is not enabled (#9139) - Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168) -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 16 2023 Remi Collet - 1.6.4-1 - update to 1.6.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2244535 - CVE-2023-5631 roundcube: cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages https://bugzilla.redhat.com/show_bug.cgi?id=2244535 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-735ee6d4e1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Uncover the latest Fedora 39 security patch for RoundCube, which mitigates a significant XSS vulnerability in its webmail framework.. RoundCube Email Client, Fedora 39 XSS Fix, Webmail Security Update. . Severity: Critical. LinuxSecurity.com Team

Nov 03, 2023 •Critical Fedora