Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisorycritical issuefedoraFedora 25: Roundcube Webmail Update - Critical Password Plugin Issues
**Roundcube Webmail 1.2.5** This is a security update to the stable version 1.2. It primarily fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes from upstream versions. A detailed list of changes is shown below. It's considered stable and we recommend to update all productive installations of. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-ede53aa845 2017-05-08 14:17:12.416501 --------------------------------------------------------------------------------Name : roundcubemail Product : Fedora 25 Version : 1.2.5 Release : 1.fc25 URL : https://roundcube.net/ Summary : Round Cube Webmail is a browser-based multilingual IMAP client Description : RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in PHP and requires a database: MySQL, PostgreSQL and SQLite are known to work. The user interface is fully skinnable using XHTML and CSS 2. --------------------------------------------------------------------------------Update Information: **Roundcube Webmail 1.2.5** This is a security update to the stable version 1.2. It primarily fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes from upstream versions. A detailed list of changes is shown below. It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating! CHANGELOG * Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114] * Fix re-positioning of the fixed header of messages list in Chrome when usingminimal mode toggle and About dialog (#5711) * Fix so settings/upload.inc could not be used by plugins (#5694) * Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713) * Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true (#5695) * Fix bug where base_dn setting was ignored inside group_filters (#5720) --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade roundcubemail' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
May 08, 2017
•Critical
Fedora
89
security advisorymoderateupdateFedora 24 Roundcube: 2017-c8448d0cad Moderate Security Fix
**Roundcube Webmail 1.2.5** This is a security update to the stable version 1.2. It primarily fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes from upstream versions. A detailed list of changes is shown below. It's considered stable and we recommend to update all productive installations of. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-c8448d0cad 2017-05-08 14:17:08.814934 --------------------------------------------------------------------------------Name : roundcubemail Product : Fedora 24 Version : 1.2.5 Release : 1.fc24 URL : https://roundcube.net/ Summary : Round Cube Webmail is a browser-based multilingual IMAP client Description : RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in PHP and requires a database: MySQL, PostgreSQL and SQLite are known to work. The user interface is fully skinnable using XHTML and CSS 2. --------------------------------------------------------------------------------Update Information: **Roundcube Webmail 1.2.5** This is a security update to the stable version 1.2. It primarily fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes from upstream versions. A detailed list of changes is shown below. It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating! CHANGELOG * Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114] * Fix re-positioning of the fixed header of messages list in Chrome when usingminimal mode toggle and About dialog (#5711) * Fix so settings/upload.inc could not be used by plugins (#5694) * Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713) * Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true (#5695) * Fix bug where base_dn setting was ignored inside group_filters (#5720) --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade roundcubemail' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
May 08, 2017
Fedora
89
security advisorycritical issueFedoraFedora 26: 2017-7263e7d321 Critical: Roundcube Password Plugin Issue
**Roundcube Webmail 1.2.5** This is a security update to the stable version 1.2. It primarily fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes from upstream versions. A detailed list of changes is shown below. It's considered stable and we recommend to update all productive installations of. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-7263e7d321 2017-05-04 13:28:52.301096 --------------------------------------------------------------------------------Name : roundcubemail Product : Fedora 26 Version : 1.2.5 Release : 1.fc26 URL : https://roundcube.net/ Summary : Round Cube Webmail is a browser-based multilingual IMAP client Description : RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in PHP and requires a database: MySQL, PostgreSQL and SQLite are known to work. The user interface is fully skinnable using XHTML and CSS 2. --------------------------------------------------------------------------------Update Information: **Roundcube Webmail 1.2.5** This is a security update to the stable version 1.2. It primarily fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin plus adds a few cherry-picked bug fixes from upstream versions. A detailed list of changes is shown below. It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating! CHANGELOG * Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114] * Fix re-positioning of the fixed header of messages list in Chrome when usingminimal mode toggle and About dialog (#5711) * Fix so settings/upload.inc could not be used by plugins (#5694) * Fix regression in LDAP fuzzy search where it always used prefix search instead (#5713) * Fix bug where namespace prefix could not be truncated on folders list if show_real_foldernames=true (#5695) * Fix bug where base_dn setting was ignored inside group_filters (#5720) --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade roundcubemail' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
May 04, 2017
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!