Roundcube

Roundcube is a browser-based IMAP client that gives email users an application-like user interface. It is for people who access an IMAP email account through a web browser and prefer an interface that feels like an application. Its parts are specific: the web browser is the platform, IMAP is the email protocol, and Roundcube is the browser client. This makes it a focused choice for browser-based email access where IMAP is the required protocol. The limitation is that Roundcube's scope is narrow: it centers on IMAP in a browser. It may not suit people looking for a client outside the browser or for software based on another email protocol. Its application-like interface does not change that platform and protocol boundary.

This is a security update to the version 1.7 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: - Fix IMAP command injection via CRLF in `_uid` parameter of mail/headers and mail/viewsource action, reported by Wahab "NeoX" Khadir. - Fix bug where an alias login wasn't qualified by IMAP host, reported by Milan Hoppe. - Add a size limit to the CSS proxy content processing, reported b…

Full release notes →