CVE-2023-5631
roundcube: roundcube - security update
CVE-2023-5631 is fixed in 6 products on 1 platform, first by DEBIAN-CVE-2023-5631, released October 18, 2023. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on October 26, 2023. Patch Radar priority: Patch now.
Patch nowCISA KEV
CVSS
5.4
medium
Exploitation
Exploited
Listed by CISA
CISA KEV
Oct 26, 2023
Federal due date Nov 16, 2023
EPSS
0.7634
99th percentile
roundcube - security update
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| roundcube · Debian 11.6 (bullseye) | 1.4.15+dfsg.1-1~deb11u1 | DSA-5531-1 | Oct 23, 2023 |
| roundcube · Debian 12.15 (bookworm) | 1.6.4+dfsg-1~deb12u1 | DSA-5531-1 | Oct 23, 2023 |
| roundcube · Debian 13.5 (trixie) | 1.6.4+dfsg-1 | DEBIAN-CVE-2023-5631 | Oct 18, 2023 |
| roundcube · Debian 14 | 1.6.4+dfsg-1 | DEBIAN-CVE-2023-5631 | Oct 18, 2023 |
| roundcube · Ubuntu 18.04.6 LTS (bionic) | 1.3.6+dfsg.1-1ubuntu0.1~esm4 | roundcube 1.3.6+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube · Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg.1-1ubuntu0.1~esm4 | roundcube 1.4.3+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube · Ubuntu 22.04.1 LTS (jammy) | 1.5.0+dfsg.1-2ubuntu0.1~esm3 | roundcube 1.5.0+dfsg.1-2ubuntu0.1~esm3 | Jun 6, 2024 |
| roundcube-core · Ubuntu 18.04.6 LTS (bionic) | 1.3.6+dfsg.1-1ubuntu0.1~esm4 | roundcube-core 1.3.6+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-core · Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg.1-1ubuntu0.1~esm4 | roundcube-core 1.4.3+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-core · Ubuntu 22.04.1 LTS (jammy) | 1.5.0+dfsg.1-2ubuntu0.1~esm3 | roundcube-core 1.5.0+dfsg.1-2ubuntu0.1~esm3 | Jun 6, 2024 |
| roundcube-mysql · Ubuntu 18.04.6 LTS (bionic) | 1.3.6+dfsg.1-1ubuntu0.1~esm4 | roundcube-mysql 1.3.6+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-mysql · Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg.1-1ubuntu0.1~esm4 | roundcube-mysql 1.4.3+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-mysql · Ubuntu 22.04.1 LTS (jammy) | 1.5.0+dfsg.1-2ubuntu0.1~esm3 | roundcube-mysql 1.5.0+dfsg.1-2ubuntu0.1~esm3 | Jun 6, 2024 |
| roundcube-pgsql · Ubuntu 18.04.6 LTS (bionic) | 1.3.6+dfsg.1-1ubuntu0.1~esm4 | roundcube-pgsql 1.3.6+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-pgsql · Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg.1-1ubuntu0.1~esm4 | roundcube-pgsql 1.4.3+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-pgsql · Ubuntu 22.04.1 LTS (jammy) | 1.5.0+dfsg.1-2ubuntu0.1~esm3 | roundcube-pgsql 1.5.0+dfsg.1-2ubuntu0.1~esm3 | Jun 6, 2024 |
| roundcube-plugins · Ubuntu 18.04.6 LTS (bionic) | 1.3.6+dfsg.1-1ubuntu0.1~esm4 | roundcube-plugins 1.3.6+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-plugins · Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg.1-1ubuntu0.1~esm4 | roundcube-plugins 1.4.3+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-plugins · Ubuntu 22.04.1 LTS (jammy) | 1.5.0+dfsg.1-2ubuntu0.1~esm3 | roundcube-plugins 1.5.0+dfsg.1-2ubuntu0.1~esm3 | Jun 6, 2024 |
| roundcube-sqlite3 · Ubuntu 18.04.6 LTS (bionic) | 1.3.6+dfsg.1-1ubuntu0.1~esm4 | roundcube-sqlite3 1.3.6+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-sqlite3 · Ubuntu 20.04 LTS (focal) | 1.4.3+dfsg.1-1ubuntu0.1~esm4 | roundcube-sqlite3 1.4.3+dfsg.1-1ubuntu0.1~esm4 | Jun 6, 2024 |
| roundcube-sqlite3 · Ubuntu 22.04.1 LTS (jammy) | 1.5.0+dfsg.1-2ubuntu0.1~esm3 | roundcube-sqlite3 1.5.0+dfsg.1-2ubuntu0.1~esm3 | Jun 6, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.