GCVE-110-MAGEIA-2018-463

Advisory Published

Vulnetix · Advisory published November 21, 2018

This is a service release to update the stable version 1.3 of Roundcube Webmail. It contains fixes to several bugs backported from the master branch including a security fix for a reported XSS vulnerability (in handling invalid style tag content) plus updates to ensure compatibility with PHP 7.3 and recent versions of Courier-IMAP, Dovecot and MySQL 8 (no CVE).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	roundcubemail	0 (affected), 1.3.8-1.mga6 (unaffected)	—

References

Updated roundcubemail packages fix security vulnerability & bugs

advisory

Updated roundcubemail packages fix security vulnerability & bugs

issue

Updated roundcubemail packages fix security vulnerability & bugs

issue

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON