@thomascube thomascube released this Apr 29, 2018 · 2146 commits to master since this release

Assets 8

This is a follow-up to the recent security update for the stable version 1.2. It fixes a regression that sneaked in with the IMAP command injection protection which unintentionally disabled actions that operate on all selected messages (e.g. mark all as junk).

We recommend to update all productive installations of Roundcube 1.2.8.
Please do backup your data before updating!


  • Fix regression where IMAP commands with '*' uidset argument wasn't working