Lucene search

K
suseSuseOPENSUSE-SU-2016:0213-1
HistoryJan 24, 2016 - 3:12 p.m.

Security update for roundcubemail (important)

2016-01-2415:12:40
lists.opensuse.org
18

EPSS

0.119

Percentile

95.4%

This update to roundcubemail 1.1.4 fixes the following issues:

  • CVE-2015-8770: Path traversal vulnerability allowed code execution to
    remote authenticated users if they were also upload files to the same
    server through some other method (boo#962067)

This update also contains all upstream fixes in 1.1.4. The package was
updated to use generic PHP requirements for use with other prefixes than
"php5-"

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.1noarchroundcubemail< 1.1.4-6.1roundcubemail-1.1.4-6.1.noarch.rpm