The Horde Team is pleased to announce the final release of the Internet Mail Program (IMP) version H4 (5.0.22).
Thanks to Mike Cardwell (https://grepular.com/) for reporting the SVG vulnerability. IMP, the Internet Mail Program, is one of the most popular and widely deployed open source webmail applications in the world. It allows universal, web-based access to IMAP and POP3 mail servers and provides Ajax, mobile and traditional interfaces with a rich range of features normally found only in desktop email clients. For more information on IMP, visit http://www.horde.org/apps/imp. The major changes compared to the IMP version H4 (5.0.21) are: * Only display basic image attachments in the browser to avoid XSS vulnerabilities triggered by opening malicious SVG attachments. * Re-added option to report messages as spam/ham through redirection. * Updated Swedish and Turkish translations. The full list of changes can be viewed here: https://github.com/horde/horde/blob/4764bca74481622b39dd1d9b81d62882128255b3/imp/docs/CHANGES Have fun! The Horde Team. -- imp mailing list Frequently Asked Questions: http://wiki.horde.org/FAQ To unsubscribe, mail: [email protected]
