This update fixes a recently reported cross-site scripting (XSS) vulnerability via HTML messages with malicious svg/namespace. References: - https://bugs.mageia.org/show_bug.cgi?id=26905 . MGASA-2020-0301 - Updated roundcubemail packages fix security vulnerability Publication date: 31 Jul 2020 URL: https://advisories.mageia.org/MGASA-2020-0301.html Type: security Affected Mageia releases: 7 This update fixes a recently reported cross-site scripting (XSS) vulnerability via HTML messages with malicious svg/namespace. References: - https://bugs.mageia.org/show_bug.cgi?id=26905 - https://github.com/roundcube/roundcubemail/releases/tag/1.3.14 SRPMS: - 7/core/roundcubemail-1.3.14-1.mga7 . Mageia 2020-0302 releases an update for the phpMyAdmin tool addressing a security issue related to SQL injection through crafted database queries.. Mageia Security Advisory, Roundcube XSS Patch, Update for Roundcube, Mageia 2020-0301. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.