openSUSE Build Service

Overview Details Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo (Revision 778c7464fab058e0cca228cbcffe3d23)

Currently displaying revision 778c7464fab058e0cca228cbcffe3d23 , Show latest

<patchinfo incident="Update">
  <packager>aeneas_jaissle</packager>
  <issue tracker="cve" id="CVE-2013-6172" />
  <issue tracker="bnc" id="847179">VUL-0: CVE-2013-6172 : roundcubemail: vulnerability in handling _session argument of utils/save-prefs</issue>
  <category>security</category>
  <rating>moderate</rating>
  <summary>roundcubemail: update to 0.9.5</summary>
  <description>
roundcubemail was updated to 0.9.5 to fix bugs and security issues.

Fixed security issues:
  * CVE-2013-6172

New upstream release 0.9.5 (bnc#847179) (CVE-2013-6172)
  * Fix failing vCard import when email address field contains spaces
  * Fix default spell-check configuration after Google suspended their spell service
  * Fix vulnerability in handling _session argument of utils/save-prefs
  * Fix iframe onload for upload errors handling
  * Fix address matching in Return-Path header on identity selection
  * Fix text wrapping issue with long unwrappable lines
  * Fixed mispelling: occured -> occurred
  * Fixed issues where HTML comments inside style tag would hang Internet Explorer
  * Fix setting domain in virtualmin password driver
  * Hide Delivery Status Notification option when smtp_server is unset
  * Display full attachment name using title attribute when name is too long to display
  * Fix attachment icon issue when rare font/language is used
  * Fix expanded thread root message styling after refreshing messages list
  * Fix issue where From address was removed from Cc and Bcc fields when editing a draft
  * Fix error_reporting directive check
  * Fix de_DE localization of "About" label in Help plugin

</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo (Revision 778c7464fab058e0cca228cbcffe3d23)

Places