Skip to content

Roundcube Webmail 1.3.17

Choose a tag to compare

View all tags
@thomascube thomascube released this 12 Nov 21:29
1.3.17
This tag was signed with the committer’s verified signature.
thomascube Thomas B.
GPG key ID: D105DEA0B545B36C
Verified
Learn about vigilant mode.
c23eef1

This is a security update to the LTS version 1.3.
It fixes two recently discovered vulnerabilities:

  • Fix XSS issue in handling attachment filename extension in mimetype mismatch warning
  • Fix possible SQL injection via some session variables

This version in considered stable and we strongly recommend to update all productive installations of Roundcube 1.3.x with it. Please do backup your data before updating!

Assets 8
Loading