Roundcube

The Roundcube Webmail suite

app

Alternative to: gmail, outlook, yahoo mail

Website Repository Docs

About Versions (100)

Back to Versions

1.4.15

2023-10-16

This is a security update to the stable version 1.4 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerability:

Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168) reported separately by Matthieu Faou (ESET) and Denys Klymenko.

This version is considered stable and we recommend to update all productive installations of Roundcube 1.4.x with it. Please do backup your data before updating!

CHANGELOG

Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168)
Fix PHP 5.4 compatibility by using pear-core-minimal 1.10.11 (#9148)

Changelog on GitHub →