FEDORA-2019-d9c2f1ec70 — security update for roundcubemail

stable

roundcubemail-1.3.10-1.fc29

FEDORA-2019-d9c2f1ec70 created by remi 5 years ago for Fedora 29

Version 1.3.10

Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled (#6723)
Enigma: Fix bug where revoked users/keys were not greyed out in key info
Enigma: Fix error message when trying to encrypt with a revoked key (#6607)
Enigma: Fix "decryption oracle" bug [CVE-2019-10740] (#6638)
Fix compatibility with kolab/net_ldap3 > 1.0.7 (#6785)
Fix bug where bmp images couldn't be displayed on some systems (#6728)
Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp (#6744)
Fix bug where bold/strong text was converted to upper-case on html-to-text conversion (6758)
Fix bug in rcube_utils::parse_hosts() where %t, %d, %z could return only tld (#6746)
Fix bug where Next/Prev button in mail view didn't work with multi-folder search result (#6793)
Fix bug where selection of columns on messages list wasn't working
Fix bug in converting multi-page Tiff images to Jpeg (#6824)
Fix wrong messages order after returning to a multi-folder search result (#6836)
Fix PHP 7.4 deprecation: implode() wrong parameter order (#6866)
Fix bug where it was possible to bypass the position:fixed CSS check in received messages (#6898)
Fix bug where some strict remote URIs in url() style were unintentionally blocked (#6899)
Fix bug where it was possible to bypass the CSS jail in HTML messages using :root pseudo-class (#6897)
Fix bug where it was possible to bypass href URI check with data:application/xhtml+xml URIs (#6896)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-d9c2f1ec70

This update has been submitted for testing by remi.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

This update can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

roundcubemail-1.3.10-1.fc29

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1747321 CVE-2019-15237 roundcube: mishandling of Punycode xn-- domain name leads to homograph attack

BZ#1747322 CVE-2019-15237 roundcubemail: roundcube: mishandling of Punycode xn-- domain name leads to homograph attack [fedora-all]

roundcubemail-1.3.10-1.fc29

Automated Test Results

ignored