Skip to content
Heist/ feed
Back to feed
UnratedFix available

[DSA 6579-1] roundcube security update

Type: patchSources: Debian DSA

Multiple vulnerabilities in roundcube were fixed in the trixie package version 1.6.20+dfsg-0+deb13u1.

Products
roundcube
Affected versions
Not specified
Fixed versions
1.6.20+dfsg-0+deb13u1
CVEs
CVE-2026-113386, CVE-2026-114714, CVE-2026-114715, CVE-2026-114716, CVE-2026-114717, CVE-2026-114718, CVE-2026-114719, CVE-2026-114720, CVE-2026-114721, CVE-2026-114722, CVE-2026-114723, CVE-2026-114724, CVE-2026-114725, CVE-2026-114726, CVE-2026-114727, CVE-2026-114728, CVE-2026-114729, CVE-2026-114730, CVE-2026-114731, CVE-2026-114732
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 09:38 UTC · Revision 1

Source evidence

[DSA 6579-1] roundcube security update

official-debian-dsa · Original source

Published 23 Oct 2026, 00:00 UTC

Multiple vulnerabilities in roundcube were fixed in the trixie package version 1.6.20+dfsg-0+deb13u1.

For the stable distribution (trixie), these problems have been fixed in version 1.6.20+dfsg-0+deb13u1.

roundcube

Fixed versions: 1.6.20+dfsg-0+deb13u1

Complete source record
{
  "id": "acf49b0bf9c1b19952574ff0907195c08aab32cc0ffc39f4ed169cd91f963c3c",
  "url": "https://lists.debian.org/debian-security-announce/2026/msg00495.html",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "[DSA 6579-1] roundcube security update",
    "summary": "Multiple vulnerabilities in roundcube were fixed in the trixie package version 1.6.20+dfsg-0+deb13u1.",
    "evidence": "For the stable distribution (trixie), these problems have been fixed in version 1.6.20+dfsg-0+deb13u1.",
    "products": [
      {
        "name": {
          "value": "roundcube",
          "evidence": "Package : roundcube"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "1.6.20+dfsg-0+deb13u1",
            "evidence": "these problems have been fixed in version 1.6.20+dfsg-0+deb13u1"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-113386",
        "evidence": "CVE-2026-113386"
      },
      {
        "value": "CVE-2026-114714",
        "evidence": "CVE-2026-114714"
      },
      {
        "value": "CVE-2026-114715",
        "evidence": "CVE-2026-114715"
      },
      {
        "value": "CVE-2026-114716",
        "evidence": "CVE-2026-114716"
      },
      {
        "value": "CVE-2026-114717",
        "evidence": "CVE-2026-114717"
      },
      {
        "value": "CVE-2026-114718",
        "evidence": "CVE-2026-114718"
      },
      {
        "value": "CVE-2026-114719",
        "evidence": "CVE-2026-114719"
      },
      {
        "value": "CVE-2026-114720",
        "evidence": "CVE-2026-114720"
      },
      {
        "value": "CVE-2026-114721",
        "evidence": "CVE-2026-114721"
      },
      {
        "value": "CVE-2026-114722",
        "evidence": "CVE-2026-114722"
      },
      {
        "value": "CVE-2026-114723",
        "evidence": "CVE-2026-114723"
      },
      {
        "value": "CVE-2026-114724",
        "evidence": "CVE-2026-114724"
      },
      {
        "value": "CVE-2026-114725",
        "evidence": "CVE-2026-114725"
      },
      {
        "value": "CVE-2026-114726",
        "evidence": "CVE-2026-114726"
      },
      {
        "value": "CVE-2026-114727",
        "evidence": "CVE-2026-114727"
      },
      {
        "value": "CVE-2026-114728",
        "evidence": "CVE-2026-114728"
      },
      {
        "value": "CVE-2026-114729",
        "evidence": "CVE-2026-114729"
      },
      {
        "value": "CVE-2026-114730",
        "evidence": "CVE-2026-114730"
      },
      {
        "value": "CVE-2026-114731",
        "evidence": "CVE-2026-114731"
      },
      {
        "value": "CVE-2026-114732",
        "evidence": "CVE-2026-114732"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-debian-dsa",
  "document_id": 23389,
  "published_at": "2026-10-23T00:00:00+00:00"
}