[Git][security-tracker-team/security-tracker][master] Add new roundcube issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 19 21:41:43 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b8f8d329 by Salvatore Bonaccorso at 2026-10-19T22:41:26+02:00
Add new roundcube issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,83 @@
+CVE-2026-XXXX [Fix IMAP command injection via CRLF in _uid parameter of mail/headers and mail/viewsource action]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/f62879defc0330ae240c72b83b2d00a8ab337447 (1.6.20)
+CVE-2026-XXXX [Fix bug where an alias login wasn't qualified by IMAP host]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/cb235cbfef88cbf78236dc67d3b667bf3dc61ddd (1.6.20)
+CVE-2026-XXXX [Add a size limit to the CSS proxy content processing]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/99a5bdd05b01f45493cc0da4c96968eac7668126 (1.6.20)
+CVE-2026-XXXX [Fix SSRF filter (is_local_url()) bypass via NAT64 64:ff9b::/96]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/3c3a65f66b53b7aaf3d720acd06e0b102eceb090 (1.6.20)
+CVE-2026-XXXX [Fix remote content blocking bypass via SVG SMIL by attribute]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/2b6ff79d8b14f94b0ff04765b7f02dbfdfe98efa (1.6.20)
+CVE-2026-XXXX [Fix remote content blocking bypass via CSS escapes in FuncIRI attributes (again)]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/ff4fcfdd2952f9d09947cc9c18137f381f27caf1 (1.6.20)
+CVE-2026-XXXX [Fix passing potentally unsafe attachment content into ImageMagick on image resize]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/895d88af37720d2b46e4553f524013b2e1cb7665 (1.6.20)
+CVE-2026-XXXX [Fix mail header injection via the From display-name in the Bounce (resend) action]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/3a136465c965776a5f636587187626985dae4f3b (1.6.20)
+CVE-2026-XXXX [Fix mail header injection via References/In-Reply-To/Message-ID/From parameters]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/79adcfc0c48012bbbe930278471425027fd7331c (1.6.20)
+CVE-2026-XXXX [Fix object injection primitive in rcube_session::unserialize() via "!"-prefixed session keys]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/833770d3d3c35cfde74cc2614d368f25a75b6f99 (1.6.20)
+CVE-2026-XXXX [Fix ImageMagick resource limits bypass by GD fallback during thumbnail generation]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/0bea81121efd96f07432a837f391dbdd0dffa33f (1.6.20)
+CVE-2026-XXXX [Fix CSS scoping bypass in HTML messages using at-rules]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/ff9cf4a9bf3b7c66db9afe43fe5f1cc73b47ed35 (1.6.20)
+CVE-2026-XXXX [Fix bug where deprecated action aliases bypassed disabled_actions setting]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/e7c512ae09ebd0ae5d0d2f29e00a767bf91f6bbe (1.6.20)
+CVE-2026-XXXX [Fix IMAP command injection via CRLF in _flag parameter of mail/mark action]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/242c6d6a150c850bd96d20d400261e71f8d11f9b (1.6.20)
+CVE-2026-XXXX [Fix CSRF validation bypass in the mark-as-junk action]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/15b0dc0d6e5712310c8f663577361bf8132a7f81 (1.6.20)
+CVE-2026-XXXX [Fix XSS issue in handling of password driver error responses]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/94298856ee67ff7817cc4def2adb634be91e28c7 (1.6.20)
+CVE-2026-XXXX [Fix mail header injection via subject of a message forwarded as attachment]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/c325953a251d0132f1909569b3eac0b974095dd4 (1.6.20)
+CVE-2026-XXXX [Fix mail header injection via media type in an inline image data URI]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/adb9b9b3fd43e30af1c166b79494726d89f828eb (1.6.20)
+CVE-2026-XXXX [Fix bug where Password Modoboa driver could change password for another account]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/3d9d05bfe2da7f93b8d47e68cadab22bb67e6cc9 (1.6.20)
+CVE-2026-XXXX [Fix unsafe use of a login name in SquirrelMail import file path]
+ - roundcube 1.6.20+dfsg-1 (bug #1151279)
+ NOTE: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
+ NOTE: Fixed by: https://github.com/roundcube/roundcubemail/commit/15fd175d154311ca7f59cf696c6cc39471611aa6 (1.6.20)
CVE-2026-91858 (FopProducer transforms the incoming XSL-FO message body by creating a ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-90910 (Missing authentication for critical function vulnerability in Apache A ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b8f8d3297d23f7801917d6ec62c2f31561703a97
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b8f8d3297d23f7801917d6ec62c2f31561703a97
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/fb43c1a9/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list