FEDORA-2020-2a1a6a8432 — security update for roundcubemail

stable

roundcubemail-1.4.6-1.fc31

FEDORA-2020-2a1a6a8432 created by remi 4 years ago for Fedora 31

RELEASE 1.4.6

Installer: Fix regression in SMTP test section (#7417)

RELEASE 1.4.5

Fix bug in extracting required plugins from composer.json that led to spurious error in log (#7364)
Fix so the database setup description is compatible with MySQL 8 (#7340)
Markasjunk: Fix regression in jsevent driver (#7361)
Fix missing flag indication on collapsed thread in Larry and Elastic (#7366)
Fix default keyservers (use keys.openpgp.org), add note about CORS (#7373, #7367)
Password: Fix issue with Modoboa driver (#7372)
Mailvelope: Use sender's address to find pubkeys to check signatures (#7348)
Mailvelope: Fix Encrypt button hidden in Elastic (#7353)
Fix PHP warning: count(): Parameter must be an array or an object... in ID command handler (#7392)
Fix error when user-configured skin does not exist anymore (#7271)
Elastic: Fix aspect ratio of a contact photo in mail preview (#7339)
Fix bug where PDF attachments marked as inline could have not been attached on mail forward (#7382)
Security: Fix a couple of XSS issues in Installer (#7406)
Security: Fix XSS issue in template object 'username' (#7406)
Security: Better fix for CVE-2020-12641
Security: Fix cross-site scripting (XSS) via malicious XML attachment

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-2a1a6a8432

This update has been submitted for testing by remi.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has obsoleted roundcubemail-1.4.5-1.fc31, and has inherited its bugs and notes.

4 years ago

This update's test gating status has been changed to 'greenwave_failed'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

remi edited this update.

4 years ago

remi edited this update.

4 years ago

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

modified

4 years ago

Builds

roundcubemail-1.4.6-1.fc31

BZ#1848338 CVE-2020-13965 roundcubemail: XSS via a malicious XML attachment

BZ#1848339 CVE-2020-13965 roundcubemail: XSS via a malicious XML attachment [fedora-all]

BZ#1848341 CVE-2020-13964 roundcubemail: XSS via the username template object

BZ#1848342 CVE-2020-13964 roundcubemail: XSS via the username template object [fedora-all]

roundcubemail-1.4.6-1.fc31

Automated Test Results

ignored