Lucene search
SuseOPENSUSE-SU-2016:0214-1HistoryJan 24, 2016 - 7:11 p.m.
Security update for roundcubemail (important)
2016-01-2419:11:05
lists.opensuse.org
9
0.119 Low
EPSS
Percentile
95.4%
Update to 1.0.8
- Add workaround for <a href=“https://bugs.php.net/bug.php?id=70757”>https://bugs.php.net/bug.php?id=70757</a> (#1490582)
- Fix HTML sanitizer to skip <!-- node type X –> in output
(#1490583)
- Fix charset encoding of message/rfc822 part bodies (#1490606)
- Fix handling of message/rfc822 attachments on replies and forwards
(#1490607)
- Fix PDF support detection in Firefox > 19 (#1490610)
- Fix path traversal vulnerability (CWE-22) in setting a skin (#1490620)
[CVE-2015-8770] [bnc#962067]
- Fix so drag-n-drop of text (e.g. recipient addresses) on compose page
actually works (#1490619)
- Fix .htaccess rewrite rules to not block .well-known URIs (#1490615)
- Updated apache2 config
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 13.1 | noarch | roundcubemail | < 1.0.8-2.27.1 | roundcubemail-1.0.8-2.27.1.noarch.rpm |
References
Related
htbridge
htbridge
Remote Code Execution in Roundcube
2015-12-21 00:00:00
openvas
openvas
openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2016:0210-1)
2016-01-25 00:00:00
Debian: Security Advisory (DSA-3541-1)
2016-04-04 00:00:00
openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2016:0214-1)
2016-01-25 00:00:00
debian
debian
[SECURITY] [DSA 3541-1] roundcube security update
2016-04-05 08:57:51
[SECURITY] [DSA 3541-1] roundcube security update
2016-04-05 08:57:51
[SECURITY] [DLA 392-1] roundcube security update
2016-01-17 18:27:52
cvelist
cvelist
CVE-2015-8770
2016-01-29 19:00:00
nessus
nessus
openSUSE Security Update : roundcubemail (openSUSE-2016-80)
2016-01-26 00:00:00
openSUSE Security Update : roundcubemail (openSUSE-2016-84)
2016-01-27 00:00:00
Debian DSA-3541-1 : roundcube - security update
2016-04-07 00:00:00
zdt
zdt
Roundcube 1.1.3 - Directory Traversal
2016-01-15 00:00:00
exploitpack
exploitpack
Roundcube Webmail 1.1.3 - Directory Traversal
2016-01-15 00:00:00
debiancve
debiancve
CVE-2015-8770
2016-01-29 19:59:00
archlinux
archlinux
roundcubemail: remote code execution
2016-01-17 00:00:00
cve
cve
CVE-2015-8770
2016-01-29 19:59:00
suse
suse
Security update for roundcubemail (important)
2016-01-24 15:11:29
Security update for roundcubemail (important)
2016-01-24 15:12:40
packetstorm
packetstorm
Roundcube 1.1.3 Path Traversal
2016-01-15 00:00:00
ubuntucve
ubuntucve
CVE-2015-8770
2016-01-29 00:00:00
prion
prion
Directory traversal
2016-01-29 19:59:00
nvd
nvd
CVE-2015-8770
2016-01-29 19:59:00
exploitdb
exploitdb
Roundcube Webmail 1.1.3 - Directory Traversal
2016-01-15 00:00:00
gentoo
gentoo
Roundcube: Multiple Vulnerabilities
2016-03-09 00:00:00