Roundcube

This is a follow-up to the recent security update for the stable version 1.2. It fixes a regression that sneaked in with the IMAP command injection protection which unintentionally disabled actions that operate on all selected messages (e.g. mark all as junk).

We recommend to update all productive installations of Roundcube 1.2.8. Please do backup your data before updating!

CHANGELOG

• Fix regression where IMAP commands with ’*’ uidset argument wasn’t working