Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/roundcube/roundcubemail.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2021-11-13Bump version to 1.3.171.3.17release-1.3Thomas Bruederli
2021-10-05Add input validation for list column/orderAleksander Machniak
2021-10-05 Rename session items 'search' and 'search_params' to 'contact_search' and 'c...Aleksander Machniak
2021-10-05Fix XSS issue in handling attachment filename extension in mimetype mismatch ...Aleksander Machniak
2020-12-28Bump version to 1.3.16Thomas Bruederli
2020-12-27Fix cross-site scripting (XSS) via HTML or Plain text messages with malicious...Aleksander Machniak
2020-08-10Bump version to 1.3.151.3.15Thomas Bruederli
2020-08-09Fix cross-site scripting (XSS) via HTML messages with malicious svg or math c...Aleksander Machniak
2020-07-04Bump version to 1.3.141.3.14Thomas Bruederli
2020-07-03Fix cross-site scripting (XSS) via HTML messages with malicious svg/namespaceAleksander Machniak
2020-06-07Bump version to 1.3.131.3.13Thomas Bruederli
2020-06-02Security: Fix cross-site scripting (XSS) via malicious XML attachmentAleksander Machniak
2020-06-02Bump version to 1.3.12Thomas Bruederli
2020-06-01Security: Better fix for CVE-2020-12641Aleksander Machniak
2020-06-01Security: Fix XSS issue in template object 'username' (#7406)Aleksander Machniak
2020-04-26Bump version to 1.3.111.3.11Thomas Bruederli
2020-04-26Fix local file inclusion (and code execution) via crafted 'plugins' optionAleksander Machniak
2020-04-26Fix remote code execution via crafted 'im_convert_path' or 'im_identify_path'...Aleksander Machniak
2020-04-26Fix XSS issue in handling of CDATA in HTML messagesAleksander Machniak
2019-11-10Fix PHP warning: "array_merge(): Expected parameter 2 to be an array, null gi...Aleksander Machniak
2019-10-28Fix PHP Warning: Use of undefined constant LOG_EMERGE (#6991)Aleksander Machniak
2019-10-21Fix bug where inline images could have been ignored if Content-Id header cont...Aleksander Machniak
2019-09-28Fix PHP Warning: Redis::connect() expects parameter 2 to be int, string givenAleksander Machniak
2019-09-11Fix array offset access syntax with curly bracesAleksander Machniak
2019-09-04Fix PHP 7.4 warning: "Creating default object from empty value"Aleksander Machniak
2019-08-27Fix bug where it was possible to bypass href URI check with data:application/...1.3.10Aleksander Machniak
2019-08-27Fix security issue where it was possible to bypass the CSS jail in HTML messa...Aleksander Machniak
2019-08-27Fix bug where some strict remote URIs in url() style were unintentionally blo...Aleksander Machniak
2019-08-27Fix security issue where it was possible to bypass the position:fixed CSS che...Aleksander Machniak
2019-08-22Bump version to 1.3.10Thomas Bruederli
2019-08-09Fix implode() wrong parameter order (#6866)Jack Cherng
2019-07-14Fix wrong messages order after returning to a multi-folder search result (#6836)Aleksander Machniak
2019-07-07Fix bug in miemetype name comparatorAleksander Machniak
2019-06-26Fix bug in converting multi-page Tiff images into Jpeg (#6824)Aleksander Machniak
2019-06-20Fix bug where selection of columns on messages list wasn't workingAleksander Machniak
2019-06-07Fix bug where Next/Prev button in mail view didn't work with multi-folder sea...Aleksander Machniak
2019-06-05Fix PHP error when using Net_LDAP3 from masterAleksander Machniak
2019-05-19Update rcube_utils::parse_host, fixes #6746Amir Caspi
2019-05-19Fix bug where bold/strong text was converted to upper-case on html-to-text co...Aleksander Machniak
2019-05-11Fix regexpAleksander Machniak
2019-05-10Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp (#6744)Aleksander Machniak
2019-05-06Fix bug where bmp images couldn't be displayed on some systems (#6728)Aleksander Machniak
2019-03-31Bump version to 1.3.91.3.9Aleksander Machniak
2019-03-04Fix bug where next row wasn't selected after deleting a collapsed thread (#6655)Aleksander Machniak
2019-02-17Fix bug when aborting dragging with ESC key didn't stop the move action (#6623)Aleksander Machniak
2019-02-16Fix missing CSRF token in message download (#6621)Mario Harjac
2019-01-30Fix so mime_content_type check in Installer uses files that should always be ...Aleksander Machniak
2019-01-16Fix so ANY record is not used for email domain validation, use A, MX, CNAME, ...Aleksander Machniak
2019-01-04Fix bug in parsing some IMAP command responses that include unsolicited repli...Aleksander Machniak
2019-01-04Fix regression in vcard parserAleksander Machniak