Roundcube Community Forum

 

Roundcube 1.7 RC2 released

Started by SKaero, Today at 04:31:43 PM

Previous topic - Next topic
Print
Go Down Pages1
User actions

SKaero

Today at 04:31:43 PM
We just published the second release candidate for the next major version 1.7 of Roundcube webmail.

This release fixes two security issues and one syntax error in a database migration file for Postgres databases.

The changes are:

  • Fix Cross-Site-Scripting vulnerability via SVG's animate tag reported by Valentin T., CrowdStrike.
  • Fix Information Disclosure vulnerability in the HTML style sanitizer reported by somerandomdev.
  • Fix syntax error in DDL scripts for Postgres (#10052)

We believe it is production ready, but we recommend to test it on a separate environment.

Migrate existing configs with either the installto.sh or the update.sh scripts.

And don't forget to backup your data before installing it!

Source: https://roundcube.net/news/2025/12/15/roundcube-1.7-rc2-released
Get it Now: https://roundcube.net/download
Print
Go Up Pages1
User actions