The updated package fixes a security vulnerability: Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. (CVE-2019-15237) . MGASA-2019-0420 - Updated roundcubemail packages fix security vulnerability Publication date: 31 Dec 2019 URL: https://advisories.mageia.org/MGASA-2019-0420.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-15237 The updated package fixes a security vulnerability: Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. (CVE-2019-15237) References: - https://bugs.mageia.org/show_bug.cgi?id=25944 - https://lists.fedoraproject.org/archives/list/
Get the latest Linux and open source security news straight to your inbox.