external/mailinabox
1
0 Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2026-11-12 08:56:00 +01:00
Code Issues Releases Wiki Activity

Update Roundcube to protect against CVE-2017-16651

Browse Source 
See https://roundcube.net/news/2017/11/08/security-updates-1.3.3-1.2.7-and-1.1.10.

merges #1287
This commit is contained in:
yeah authored and Joshua Tauberer committed 2017-11-15 11:14:21 -05:00
1 parent 544f155948
commit 2bbbc9dfa3
2 files changed
+8 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CHANGELOG.md
+6
View File
@@ -4,6 +4,12 @@ CHANGELOG
In Development
--------------
This update is a security update addressing [CVE-2017-16651, a vulnerability in Roundcube webmail that allows logged-in users to access files on the local filesystem](https://roundcube.net/news/2017/11/08/security-updates-1.3.3-1.2.7-and-1.1.10).
Mail:
* Update to Roundcube 1.3.3.
Control Panel:
* Fix DNS validation to allow wildcard custom DNS entries to be set.