—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA512<\/p>\n
– ————————————————————————-
Debian Security Advisory DSA-5743-2 security@debian.org
https:\/\/www.debian.org\/security\/ Moritz Muehlenhoff
August 13, 2024 https:\/\/www.debian.org\/security\/faq
– ————————————————————————-<\/p>\n
Package : roundcube
CVE ID : CVE-2024-42008 CVE-2024-42009 CVE-2024-42010<\/p>\n
Multiple cross-site scripting vulnerabilities were discovered in
RoundCube webmail.<\/p>\n
For the oldstable distribution (bullseye), these problems have been fixed in
version 1.4.15+dfsg.1-1+deb11u4.<\/p>\n
For the stable distribution (bookworm), these problems have already been
addressed in DSA-5743-1. The initial fixes introduced a regression in
print previews, which has now been addressed in 1.6.5+dfsg-1+deb12u4.<\/p>\n
We recommend that you upgrade your roundcube packages.<\/p>\n
For the detailed security status of roundcube please refer to
its security tracker page at:
https:\/\/security-tracker.debian.org\/tracker\/roundcube<\/p>\n
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https:\/\/www.debian.org\/security\/<\/p>\n
Mailing list: debian-security-announce@lists.debian.org
—–BEGIN PGP SIGNATURE—–<\/p>\n
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAma7AK0ACgkQEMKTtsN8
TjaCLhAAj9ooFCqkks\/zX1SUM0VpGOKCUwkUiAotKggBJnAOhCAeLJ++YXJeFpTx
h8Muye2jgC1BjpmA0HsdjtHDUOEWL73n2eG3obHEQG+WytJISfz7LyoFxJPBDZUA
bKs0+MMg8wA8VJJWZ8PIoYm4DaTjgVkiaCQQxJhRfZw\/LNGFYN9Y9yEL2XrncR8I
fZoug\/Iyl4+qC8zr2iYWHFs2TMZXMbYNLFRDY06J5XYFuQ0QPa7KbkN8UvXRNeK4
DOTrkQKeauJHmWl9gfJ9U8w+TYo8mYwU38NoEm\/1x0lhqMk\/A9KMyROJPuZmCD+R
QWMzULFdqLduvp+iMr0MSGeLnvzuX6AXME8K7JnMiELOmXWCVNAlTNFnmKBftUOZ
mh8MKlNkaGyNO2G9PGIeCNURGwI8NIN0UABZN9h289mn0QM195MuLZN\/OZtUBH2s
FU9VAXg2Lw\/WKaVj9gndSAv3aN68YN8efuXeTVnPTQaSdHsnBR0fT0yqZd1BWMFy
mq6oYxZGXfRgkb6\/KwB\/oY3dutXxtUj0GKdC7cQIG2oMyEcFN3Q5yG8oPHZHzgwJ
UYWwA46Jwhy1kRcYmukL+dGtwWsSM7yW6zjV8ifMxJ4zGMJjmMkPSWdKzG\/otn7K
oVu\/AMHnfCRY\/RmXbg1uyuCmjamDZce1fPlDTuvHW+m0AHGvYqU=
=Y9uW
—–END PGP SIGNATURE—–<\/p>\n","protected":false},"excerpt":{"rendered":"
—–BEGIN PGP SIGNED MESSAGE—–Hash: SHA512 – ————————————————————————-Debian Security Advisory DSA-5743-2 security@debian.orghttps:\/\/www.debian.org\/security\/ Moritz MuehlenhoffAugust 13, 2024 https:\/\/www.debian.org\/security\/faq– ————————————————————————- Package : roundcubeCVE ID : CVE-2024-42008 CVE-2024-42009 CVE-2024-42010 Multiple cross-site scripting vulnerabilities were discovered inRoundCube webmail. For the oldstable distribution (bullseye), these problems have been fixed inversion 1.4.15+dfsg.1-1+deb11u4. For the stable distribution (bookworm), these problems have already beenaddressed …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-58840","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=58840"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/58840\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=58840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=58840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=58840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}