Roundcube
The Roundcube Webmail suite
Alternative to: gmail, outlook, yahoo mail
About
Versions (100)
1.3.3
2017-11-08This is a security update to the stable version 1.3. It primarily fixes a recently discovered file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default. More details will be published under CVE-2017-16651.
We strongly recommend to update all productive installations of Roundcube. Please do backup your data before updating!
CHANGELOG
- Fix decoding of mailto: links with + character in HTML messages (#6020)
- Fix false reporting of failed upgrade in installto.sh (#6019)
- Fix file disclosure vulnerability caused by insufficient input validation (#6026)
- Fix mangled non-ASCII characters in links in HTML messages (#6028)