Fedora Linux 8816 Published by

A roundcubemail security update has been released for Fedora 34.



SECURITY: Fedora 34 Update: roundcubemail-1.4.13-1.fc34


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-95d576ed06
2022-01-12 01:15:26.632420
--------------------------------------------------------------------------------

Name : roundcubemail
Product : Fedora 34
Version : 1.4.13
Release : 1.fc34
URL :   http://www.roundcube.net
Summary : Round Cube Webmail is a browser-based multilingual IMAP client
Description :
RoundCube Webmail is a browser-based multilingual IMAP client
with an application-like user interface. It provides full
functionality you expect from an e-mail client, including MIME
support, address book, folder manipulation, message searching
and spell checking. RoundCube Webmail is written in PHP and
requires a database: MySQL, PostgreSQL and SQLite are known to
work. The user interface is fully skinnable using XHTML and
CSS 2.

--------------------------------------------------------------------------------
Update Information:

We just published a security update to the LTS version 1.4 of Roundcube Webmail.
It provides a fix to a recently reported XSS vulnerability: * Cross-site
scripting (XSS) via HTML messages with malicious CSS content See the full
changelog in the [release
notes](  https://github.com/roundcube/roundcubemail/releases/tag/1.4.13) in the
release notes on the Github download page. We strongly recommend to update all
productive installations of Roundcube 1.4.x with this new version.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Dec 31 2021 Remi Collet - 1.4.13-1
- update to 1.4.13
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-95d576ed06' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________