Roundcube Community Forum

 

RoundCube News: Security update for 0.2-beta

Started by bpat1434, December 09, 2009, 03:20:55 PM

Previous topic - Next topic

bpat1434

There were two security issues reported which are now fixed. The first was as possible code injection using the html2text conversion script. The other exploit used the unchecked size parameters of the quota image to let PHP create huge images eating up all the server memory.  (0 comments)

More...