Skip to content

Roundcube Webmail 1.2.12
Compare
Choose a tag to compare
@thomascube thomascube released this 10 Aug 19:13
· 4552 commits to master since this release
1.2.12
This tag was signed with the committer’s verified signature.
thomascube Thomas B.
GPG key ID: D105DEA0B545B36C
Learn about vigilant mode.
c03da1a

This is a security update to the LTS version 1.2.
It fixes two recently reported cross-site scripting (XSS) vulnerabilities via HTML messages with malicious svg and math contents.

Credits for these findings go to Łukasz Pilorz from Pentesters.

We strongly recommend to update all productive installations of Roundcube 1.2.x if you cannot upgrade to a more recent version.
Please do backup your data before updating!

Assets 8
Loading