Skip to content

Roundcube Webmail 1.0.11

Compare
Choose a tag to compare
@thomascube thomascube released this 28 Apr 08:54
· 6165 commits to master since this release
1.0.11

This is a security update to the LTS version 1.0. It fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin

It's considered stable and we recommend to update all productive installations of Roundcube 1.0.x with this version if for some reason you're not able to upgrade to the latest stable version. Please do backup your data before updating!

Instead of a full update you can apply the following patch:
https://github.com/roundcube/roundcubemail/commit/271426429b.diff

CHANGELOG

  • Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114]