Roundcubemail官网安全更新（2023-10-16）

安全更新

This is a security update to the stable version 1.6 of Roundcube Webmail.<br/>It provides a fix to a recently reported XSS vulnerability:<br/><br/>- Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168) reported separately by Matthieu Faou (ESET) and Denys Klymenko.<br/><br/>This version is considered stable and we recommend to update all productive installations of Roundcube 1.6.x with it. Please do backup your data before updating!<br/><br/>## CHANGELOG<br/><br/>- Fix PHP8 warnings (#9142, #9160)<br/>- Fix default &amp;#039;mime.types&amp;#039; path on Windows (#9113)<br/>- Managesieve: Fix javascript error when relational or spamtest extension is not enabled (#9139)<br/>- Fix cross-site scripting (XSS) vulnerability in handling of SVG in HTML messages (#9168)

暂无

暂无

暂无

暂无

https://github.com/roundcube/roundcubemail/releases/tag/1.6.4