Lucene search
SuseOPENSUSE-SU-2016:0210-1HistoryJan 24, 2016 - 3:11 p.m.
Security update for roundcubemail (important)
2016-01-2415:11:29
lists.opensuse.org
12
0.119 Low
EPSS
Percentile
95.4%
This update to roundcubemail 1.0.8 fixes the following issues:
- CVE-2015-8770: Path traversal vulnerability allowed code execution to
remote authenticated users if they were also upload files to the same
server through some other method (boo#962067)
This update also contains all upstream fixes in 1.0.8. The package was
updated to use generic PHP requirements for use with other prefixes than
"php5-"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 13.2 | noarch | roundcubemail | < 1.0.8-17.1 | roundcubemail-1.0.8-17.1.noarch.rpm |
References
Related
cvelist
cvelist
CVE-2015-8770
2016-01-29 19:00:00
nessus
nessus
openSUSE Security Update : roundcubemail (openSUSE-2016-80)
2016-01-26 00:00:00
Debian DLA-392-1 : roundcube security update
2016-01-19 00:00:00
openSUSE Security Update : roundcubemail (openSUSE-2016-81)
2016-01-26 00:00:00
htbridge
htbridge
Remote Code Execution in Roundcube
2015-12-21 00:00:00
openvas
openvas
openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2016:0210-1)
2016-01-25 00:00:00
Debian: Security Advisory (DSA-3541-1)
2016-04-04 00:00:00
openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2016:0214-1)
2016-01-25 00:00:00
debian
debian
[SECURITY] [DSA 3541-1] roundcube security update
2016-04-05 08:57:51
[SECURITY] [DSA 3541-1] roundcube security update
2016-04-05 08:57:51
[SECURITY] [DLA 392-1] roundcube security update
2016-01-17 18:27:52
suse
suse
Security update for roundcubemail (important)
2016-01-24 15:12:40
Security update for roundcubemail (important)
2016-01-24 19:11:05
packetstorm
packetstorm
Roundcube 1.1.3 Path Traversal
2016-01-15 00:00:00
ubuntucve
ubuntucve
CVE-2015-8770
2016-01-29 00:00:00
prion
prion
Directory traversal
2016-01-29 19:59:00
nvd
nvd
CVE-2015-8770
2016-01-29 19:59:00
zdt
zdt
Roundcube 1.1.3 - Directory Traversal
2016-01-15 00:00:00
exploitpack
exploitpack
Roundcube Webmail 1.1.3 - Directory Traversal
2016-01-15 00:00:00
debiancve
debiancve
CVE-2015-8770
2016-01-29 19:59:00
cve
cve
CVE-2015-8770
2016-01-29 19:59:00
archlinux
archlinux
roundcubemail: remote code execution
2016-01-17 00:00:00
exploitdb
exploitdb
Roundcube Webmail 1.1.3 - Directory Traversal
2016-01-15 00:00:00
gentoo
gentoo
Roundcube: Multiple Vulnerabilities
2016-03-09 00:00:00