PT-2018-19292 · Courier+4 · Courier-Imap+4

Publicado 2018-11-21 · Atualizado 2018-11-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Roundcube Webmail version 1.3

Description A security issue has been reported in Roundcube Webmail, related to the handling of invalid style tag content, which can lead to an XSS issue. This release also includes fixes for several bugs and updates for compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot, and MySQL 8.

Recommendations For Roundcube Webmail version 1.3, update to the latest service release to fix the security issue and apply the other fixes and compatibility updates.

Identificadores relacionados

MGASA-2018-0463

Produtos afetados

Courier-Imap

Dovecot

Mysql Server

Php

Roundcube Webmail

Referências · 4

• https://advisories.mageia.org/MGASA-2018-0463.html · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/56EUDX57TIX42ULN63ZD6HCOX5PLNOZJ · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2018-0463 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=23826 · Nota