MGASA-2018-0463
Updated roundcubemail packages fix security vulnerability & bugs
This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability (in handling invalid style tag content) plus updates to ensure compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot and MySQL 8 (no CVE).
What each source reports
OSV No score
Updated roundcubemail packages fix security vulnerability & bugs
This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability (in handling invalid style tag content) plus updates to ensure compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot and MySQL 8 (no CVE).
- Record
MGASA-2018-0463- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
roundcubemailMageia:6 |
before 1.3.8-1.mga6 | 1.3.8-1.mga6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2018-0463 is a vulnerability with no CVSS score yet in roundcubemail, published November 21, 2018. No source lists public exploit code. Fixed in roundcubemail 1.3.8-1.mga6.