-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2016-522ecc9bb5 2016-05-12 01:25:34.715922 --------------------------------------------------------------------------------
Name : roundcubemail Product : Fedora EPEL 6 Version : 1.0.9 Release : 1.el6 URL : http://www.roundcube.net Summary : Round Cube Webmail is a browser-based multilingual IMAP client Description : RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in PHP and requires a database: MySQL, PostgreSQL and SQLite are known to work. The user interface is fully skinnable using XHTML and CSS 2.
-------------------------------------------------------------------------------- Update Information:
**Release 1.0.9** * Fix a regression where some contact data was missing in export and PHP warnings were logged * Enable use of TLSv1.1 and TLSv1.2 for IMAP (#4955) * Fix XSS issue in SVG images handling (#4949) * Fix (again) security issue in DBMail driver of password plugin (CVE-2015-2181) (#4958) * Fix bug where Archive/Junk buttons were not active after page jump with select=all mode (#4961) * Fix bug in long recipients list parsing for cases where recipient name contained @-char (#4964) * Fix additional_message_headers plugin compatibility with Mail_Mime >= 1.9 (#4966) * Hide DSN option in Preferences when smtp_server is not used (#4967) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1330084 - CVE-2015-2181 CVE-2015-8864 CVE-2016-4068 CVE-2016-4069 roundcubemail: security issues fixed in version 1.0.9 https://bugzilla.redhat.com/show_bug.cgi?id=1330084 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update roundcubemail' at the command line. For more information, refer to "Managing Software with yum", available at https://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org