@thomascube thomascube released this Sep 10, 2017 · 2069 commits to master since this release

Assets 8

This is a service and security update to the stable version 1.2. It contains some important bug fixes and improvements which we picked from the upstream branch. A detailed list of changes is shown below.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating!

CHANGELOG

  • Don't ignore (global) userlogins/sendmail logging in per_user_logging mode
  • Enigma: Fix compatibility with assets_dir
  • Managesieve: Fix AM/PM suffix in vacation time selectors
  • Fix bug where comment notation within style tag would cause the whole style to be ignored (#5747)
  • Fix bug where it wasn't possible to scroll folders list in Edge (#5750)
  • Fix addressbook searching by gender (#5757)
  • Fix SQL syntax error on MariaDB 10.2 (#5774)
  • Fix bug where it wasn't possible to set timezone to auto-detected value (#5782)
  • Fix uninitialized string offset in rcube_utils::bin2ascii() and make sure rcube_utils::random_bytes() result has always requested length (#5788)
  • Fix potential XSS vulnerability with malformed HTML message markup