Stay Secure with the Latest Linux Advisories

security advisoryfedoracross site scripting

Ubuntu 22.10 Nextcloud 3.6.0-Beta Updates 2025-8c1e431547

Version 1.7-rc5 Password: Add nt-binary hashing method (#10096) Fix URL matching for domain names with port numbers (#10105) Fix PHP fatal error when using IMAP cache (#10102) Fix Postgres connection using IPv6 address (#10104). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9b0f520716 2026-03-28 00:15:26.019784+00:00 -------------------------------------------------------------------------------- Name : roundcubemail Product : Fedora 44 Version : 1.7~rc5 Release : 1.fc44 URL : https://roundcube.net/ Summary : Round Cube Webmail is a browser-based multilingual IMAP client Description : RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in PHP and requires a database: MySQL, PostgreSQL and SQLite are known to work. The user interface is fully skinnable using XHTML and CSS 2. -------------------------------------------------------------------------------- Update Information: Version 1.7-rc5 Password: Add nt-binary hashing method (#10096) Fix URL matching for domain names with port numbers (#10105) Fix PHP fatal error when using IMAP cache (#10102) Fix Postgres connection using IPv6 address (#10104) Fix bug where rel=stylesheet part of a could get removed Security: Fix pre-auth arbitrary file write via unsafe deserialization in redis/memcache session handler Security: Fix bug where a password could get changed without providing the old password Security: Fix IMAP Injection + CSRF bypass in mail search Security: Fix remote image blocking bypass via various SVG animate attributes Security: Fix remote image blocking bypass via a crafted body background attribute Security: Fix fixed position mitigation bypass via use of!important Security: Fix XSS issue in a HTML attachment preview Security: Fix SSRF + Information Disclosure via stylesheet links to a local network hosts -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 18 2026 Remi Collet - 1.7~rc5-1 - update to 1.7-rc5 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9b0f520716' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update for Fedora 44 Roundcube fixes multiple security issues including data exposure and injection vulnerabilities.. Fedora 44 Roundcube IMAP client security update arbitrary file write. . Severity: Important. LinuxSecurity.com Team

Mar 28, 2026 •Important Fedora