openSUSE Security Update : roundcubemail (openSUSE-SU-2012:1124-1)

Update to version 0.8.1 - lot of bugfixes and new features including new skin please check the CHANGELOG - contains security related fixes bnc777446 - Fix XSS vulnerability in message subject handling using Larry skin CVE-2012-3507 - Fix XSS issue where plain signatures wasn't secured in HTML...

Fedora 18 : roundcubemail-0.7.3-1.fc18 (2012-12290)

Latest upstream, plus patch for XSS CVE-2012-3507. http://trac.roundcube.net/ticket/1488613 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for roundcubemail FEDORA-2012-12357

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for roundcubemail FEDORA-2012-12362

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for roundcubemail FEDORA-2012-12362

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2012-12362 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora 16 : roundcubemail-0.7.3-1.fc16 (2012-12357)

Latest upstream, plus patch for XSS CVE-2012-3507. http://trac.roundcube.net/ticket/1488613 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2012-3508

CVE-2012-3508 is an XSS vulnerability in Roundcube Webmail 0.8.0 affecting the HTML email rendering path (program/lib/washtml.php), where attackers can inject script/HTML via a javascript: href in HTML-formatted emails. Connected advisories confirm remediation patches: updates to Roundcube 0.8.1 ...

CVE-2012-3508

creationtimestamp| type| source ---|---|--- 2012-08-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20549...