You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
1.6.15 (2026-03-29)
This is a security update to the stable version 1.6 of Roundcube Webmail.
It provides fixes to some regressions introduced in the previous release as
well a recently reported security vulnerability:
SVG Animate FUNCIRI Attribute Bypass -- Remote Image Loading
via fill/filter/stroke, reported by class_nzm.
This version is considered stable and we recommend to update all productive
installations of Roundcube 1.6.x with it. Please do backup your data before
updating! CHANGELOG
* Fix regression where mail search would fail on non-ascii search criteria
(#10121)
* Fix regression where some data url images could get ignored/lost (#10128)
* Fix SVG Animate FUNCIRI Attribute Bypass — Remote Image Loading via
fill/filter/stroke
0 commit comments