Roundcube Webmail 1.0.11

@thomascube thomascube released this Apr 28, 2017 · 3641 commits to master since this release

This is a security update to the LTS version 1.0. It fixes a recently discovered vulnerability in the virtualmin and sasl drivers of the password plugin

It's considered stable and we recommend to update all productive installations of Roundcube 1.0.x with this version if for some reason you're not able to upgrade to the latest stable version. Please do backup your data before updating!

Instead of a full update you can apply the following patch:
https://github.com/roundcube/roundcubemail/commit/271426429b.diff

CHANGELOG

  • Password: Fix security issue in virtualmin and sasl drivers [CVE-2017-8114]