Roundcube Community Forum

News and Announcements => News & Announcements => Topic started by: SKaero on April 30, 2020, 02:28:54 PM

Title: Security updates 1.4.4, 1.3.11 and 1.2.10 released
Post by: SKaero on April 30, 2020, 02:28:54 PM
We just published service and security updates to the stable version 1.4 and the LTS versions 1.3 and 1.2 of Roundcube Webmail. They contain four fixes for recently reported security vulnerabilities as well a number of general improvements from our issue tracker.

Security fixes
The latter two vulnerabilities are classified minor because they only affect Roundcube installations with public access to the Roundcube installer. That’s generally a high-risk situation and is expected to be rare or practically non-existent in productive Roundcube deployments. However, the fixes are done in core in order to also prevent from future and yet unknown attack vectors.

See the full changelogs in the release notes on the Github download pages for the updated versions 1.4.4 (https://github.com/roundcube/roundcubemail/releases/tag/1.4.4), 1.3.11 (https://github.com/roundcube/roundcubemail/releases/tag/1.3.11) and 1.2.10 (https://github.com/roundcube/roundcubemail/releases/tag/1.2.10).

We strongly recommend to update all productive installations of Roundcube with this new versions.

Source: https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10
Get it Now: https://roundcube.net/download