Download Roundcube Webmail 1.6.4

Version 1.6.4 of Roundcube Webmail has been released. The main feature of this email web client written in PHP is that Ajax technology is used to display the user interface, which gives a modern and smooth impression. Roundcube Webmail has support for shared folders and namespaces, internationalized domain names and SMTP delivery status notifications, among other things. In addition, the user interface for IMAP folders has been adjusted to provide more space for extensions and plug-ins. The changelog for this release can be found below:

Roundcube Webmail 1.6.4

This is a security update to the stable version 1.6 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerability:

• Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168) reported separately by Matthieu Faou (ESET) and Denys Klymenko.

This version is considered stable and we recommend to update all productive installations of Roundcube 1.6.x with it. Please do backup your data before updating!

Changelog

• Fix PHP8 warnings (#9142, #9160)
• Fix default 'mime.types' path on Windows (#9113)
• Managesieve: Fix javascript error when relational or spamtest extension is not enabled (#9139)
• Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168)