UbuntuUpdates.org

Package "roundcube-plugins"

Name: roundcube-plugins

Description:

skinnable AJAX based webmail solution for IMAP servers - plugins
Latest version: 1.6.10+dfsg-1ubuntu0.1
Release: plucky (25.04)
Level: security
Repository: universe
Head package: roundcube
Homepage: https://www.roundcube.net/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "roundcube-plugins"

All arch deb package
APT INSTALL

Other versions of "roundcube-plugins" in Plucky

Repository Area Version
base universe 1.6.10+dfsg-1
updates universe 1.6.10+dfsg-1ubuntu0.1

Changelog

Version: 1.6.10+dfsg-1ubuntu0.1 2025-06-19 17:11:41 UTC

  roundcube (1.6.10+dfsg-1ubuntu0.1) plucky-security; urgency=medium

  * SECURITY UPDATE: Remote code execution post authentication
    - debian/patches/CVE-2025-49113.patch: Updated
      program/actions/settings/upload.php,
      program/lib/Roundcube/rcube_utils.php and
      tests/Framework/Utils.php to validate URL parameter in upload code
    - CVE-2025-49113

 -- Chrisa Oikonomou <email address hidden> Wed, 04 Jun 2025 11:06:44 +0300
CVE-2025-49113 Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is n


About   -   Send Feedback to @ubuntu_updates