Have I gone blind, updated to 1.6.11 and  it might have been nuked earlier
we migrated up from earlier series,  but there used to be a little tiny
person with plus sign to quickly add a recipient to contacts, it seems to
be gone, so obviously I have not set something proper in 1.6, any
suggestions?


On Sun, Jun 1, 2025 at 6:26 PM Aleksander Machniak <a...@alec.pl> wrote:

> We just published security updates to the 1.6 and 1.5 LTS versions of
> Roundcube Webmail. They both contain a fix for recently reported
> security vulnerability.
>
> Security fixes:
>
> - Fix Post-Auth RCE via PHP Object Deserialization reported by firs0v.
>
> See the full changelogs in the release notes on the Github download
> pages for the updated versions 1.6.11 and 1.5.10.
>
> https://github.com/roundcube/roundcubemail/releases/tag/1.6.11
> https://github.com/roundcube/roundcubemail/releases/tag/1.5.10
>
> We strongly recommend to update all productive installations of
> Roundcube 1.6.x and 1.5.x with this new versions.
>
> --
> Alec
> _______________________________________________
> Users mailing list -- users@lists.roundcube.net
> To unsubscribe send an email to users-le...@lists.roundcube.net
>
_______________________________________________
Users mailing list -- users@lists.roundcube.net
To unsubscribe send an email to users-le...@lists.roundcube.net

Reply via email to