RoundCube Webmail multilingual IMAP client
http://www.roundcube.net/
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in PHP and requires the MySQL database. The user interface is fully skinnable using XHTML and CSS 2.
- Devel package for openSUSE:Factory
-
14
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout server:php:applications/roundcubemail && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| README.openSUSE | 0000001730 1.69 KB | |
| robots.txt | 0000000026 26 Bytes | |
| roundcubemail-1.6.7-complete.tar.gz | 0005899345 5.63 MB | |
| roundcubemail-1.6.7-complete.tar.gz.asc | 0000000833 833 Bytes | |
| roundcubemail-config_dir.patch | 0000000555 555 Bytes | |
| roundcubemail-httpd.conf | 0000009361 9.14 KB | |
| roundcubemail-httpd.inc | 0000001057 1.03 KB | |
| roundcubemail-rpmlintrc | 0000000048 48 Bytes | |
| roundcubemail.changes | 0000134659 132 KB | |
| roundcubemail.keyring | 0000006405 6.25 KB | |
| roundcubemail.logrotate | 0000000410 410 Bytes | |
| roundcubemail.spec | 0000013573 13.3 KB |
Latest Revision
Lars Vogdt (lrupp)
accepted
request 1175253
from
Lars Vogdt (lrupp)
(revision 173)
- update to 1.6.7
This is a security update to the stable version 1.6 of Roundcube Webmail.
It provides a fix to a recently reported XSS vulnerabilities:
* Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes.
Reported by Valentin T. and Lutz Wolf of CrowdStrike.
* Fix cross-site scripting (XSS) vulnerability in handling list columns from user preferences.
Reported by Huy Nguyễn Phạm Nhật.
* Fix command injection via crafted im_convert_path/im_identify_path on Windows.
Reported by Huy Nguyễn Phạm Nhật.
CHANGELOG
* Makefile: Use phpDocumentor v3.4 for the Framework docs (#9313)
* Fix bug where HTML entities in URLs were not decoded on HTML to plain text conversion (#9312)
* Fix bug in collapsing/expanding folders with some special characters in names (#9324)
* Fix PHP8 warnings (#9363, #9365, #9429)
* Fix missing field labels in CSV import, for some locales (#9393)
* Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes
* Fix cross-site scripting (XSS) vulnerability in handling list columns from user preferences
* Fix command injection via crafted im_convert_path/im_identify_path on Windows
Comments 0