FEDORA-EPEL-2024-1b8e0ad5c2 — security update for roundcubemail

stable

FEDORA-EPEL-2024-1b8e0ad5c2 created by remi 8 months ago for Fedora EPEL 9

Version 1.5.8

Fix XSS vulnerability in post-processing of sanitized HTML content CVE-2024-42009
Fix XSS vulnerability in serving of attachments other than HTML or SVG CVE-2024-42008
Fix information leak (access to remote content) via insufficient CSS filtering CVE-2024-42010
Fix so install/update scripts do not require PEAR (#9037)

This update has been submitted for testing by remi.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

8 months ago

in testing

8 months ago

in stable

8 months ago

approved

8 months ago

Builds

ignored