Software-update: Roundcube Webmail 1.5.12 / 1.6.12

Versies 1.5.12 en 1.6.12 van Roundcube Webmail zijn uitgekomen. Roundcube Webmail heeft onder andere ondersteuning voor gedeelde mappen en namespaces, internationalized domain names en SMTP-afleverstatusnotificaties. Daarnaast is de gebruikersinterface voor IMAP-mappen aangepast om zo meer ruimte te bieden voor extensies en plug-ins. De changelog voor beide uitgaven kan hieronder worden gevonden:

Security updates 1.6.12 and 1.5.12 released

We just published security updates to the 1.6 and 1.5 LTS versions of Roundcube Webmail. They both contain fixes for recently reported two security vulnerabilities.

Security fixes

• Fix Cross-Site-Scripting vulnerability via SVG’s animate tag
• Fix Information Disclosure vulnerability in the HTML style sanitizer

Version 1.6.12 also contains the following changes:

• Support IPv6 in database DSN (#9937)
• Don't force specific error_reporting setting
• Fix compatibility with PHP 8.5 regarding array_first()
• Remove X-XSS-Protection example from .htaccess file (#9875)
• Fix "Assign to group" action state after creation of a first group (#9889)
• Fix bug where contacts search would fail if contactlist_fields contained vcard fields (#9850)
• Fix bug where an mbox export file could include inconsistent message delimiters (#9879)
• Fix parsing of inline styles that aren't well-formatted (#9948)

Versienummer	1.5.12 / 1.6.12
Releasestatus	Final
Besturingssystemen	Scripttaal
Website	Roundcube Webmail
Download	https://roundcube.net/download/
Licentietype	GPL