MGASA-2015-0438
Updated roundcubemail packages fix security vulnerability
No scoreFix available
The roundcubemail package has been updated to version 1.0.7, which fixes a XSS issue in drag-n-drop file uploads and other bugs. See the upstream release announcement for more details.
What each source reports
OSV No score
Updated roundcubemail packages fix security vulnerability
The roundcubemail package has been updated to version 1.0.7, which fixes a XSS issue in drag-n-drop file uploads and other bugs. See the upstream release announcement for more details.
- Record
MGASA-2015-0438- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
roundcubemailMageia:5 |
before 1.0.7-1.mga5 | 1.0.7-1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0438 is a vulnerability with no CVSS score yet in roundcubemail, published November 7, 2015. No source lists public exploit code. Fixed in roundcubemail 1.0.7-1.mga5.