An issue was discovered in roundcube where in a cross-site scripting (XSS) via HTML or plain text messages with malicious content was possible. . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-2508-1
Fix potential XSS issue in HTML editor of the identity signature input Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145] Fix cross-site scripting (XSS) via HTML messages with malicious math content References: . MGASA-2020-0339 - Updated roundcubemail packages fix security vulnerabilities Publication date: 18 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0339.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-16145 Fix potential XSS issue in HTML editor of the identity signature input Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16145] Fix cross-site scripting (XSS) via HTML messages with malicious math content References: - https://bugs.mageia.org/show_bug.cgi?id=27079 - https://github.com/roundcube/roundcubemail/releases/tag/1.3.15 - https://www.cve.org/CVERecord?id=CVE-2020-16145 SRPMS: - 7/core/roundcubemail-1.3.15-1.mga7 . Revised roundcubemail components for Mageia address cross-site scripting vulnerabilities identified on September 10, 2021.. RoundcubeMail Update, Mageia Security Advisory, XSS Fix, Email HTML Security. . Severity: Important. LinuxSecurity.com Team
This update fixes a recently reported cross-site scripting (XSS) vulnerability via HTML messages with malicious svg/namespace. References: - https://bugs.mageia.org/show_bug.cgi?id=26905 . MGASA-2020-0301 - Updated roundcubemail packages fix security vulnerability Publication date: 31 Jul 2020 URL: https://advisories.mageia.org/MGASA-2020-0301.html Type: security Affected Mageia releases: 7 This update fixes a recently reported cross-site scripting (XSS) vulnerability via HTML messages with malicious svg/namespace. References: - https://bugs.mageia.org/show_bug.cgi?id=26905 - https://github.com/roundcube/roundcubemail/releases/tag/1.3.14 SRPMS: - 7/core/roundcubemail-1.3.14-1.mga7 . Mageia 2020-0302 releases an update for the phpMyAdmin tool addressing a security issue related to SQL injection through crafted database queries.. Mageia Security Advisory, Roundcube XSS Patch, Update for Roundcube, Mageia 2020-0301. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.