MGASA-2026-0332
- Source
- https://advisories.mageia.org/MGASA-2026-0332.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0332.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0332
- Upstream
- Published
- 2026-08-13T16:40:34Z
- Modified
- 2026-08-13T16:46:35.998665167Z
- Summary
- Updated roundcubemail package fixes security vulnerabilities
- Details
-
Updated roundcubemail to the 1.6.17 version to fix security vulnerabilities: Some XSS and DoS errors have been corrected. Various vulnerabilities in the password plugin have been fixed. An infinite loop has been fixed.
- References
-
- https://advisories.mageia.org/MGASA-2026-0332.html
- https://bugs.mageia.org/show_bug.cgi?id=35944
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TL4FNTXFDUDYFIB5CESGSLF7DCZCMJT6/
- https://roundcube.net/news/2026/07/05/security-updates-1.6.17-and-1.7.2
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54432
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54433
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62641
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62642
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62643
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62644
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:9 / roundcubemail
Package
- Name
- roundcubemail
- Purl
- pkg:rpm/mageia/roundcubemail?arch=source&distro=mageia-9