<![CDATA[Roundcube 1.5.2 released with Security fixes]]>https://github.com/roundcube/roundcubemail/releases/tag/1.5.2

Security fix

Cross-site scripting (XSS) via HTML messages with malicious CSS content
This version is considered stable and we recommend to update all productive installations of Roundcube with it. Please do backup your data before updating!

CHANGELOG

OAuth: pass 'id_token' to 'oauth_login' plugin hook (#8214)
OAuth: fix expiration of short-lived oauth tokens (#8147)
OAuth: fix relative path to assets if /index.php/foo/bar url is used (#8144)
OAuth: no auto-redirect on imap login failures (#8370)
OAuth: refresh access token in 'refresh' plugin hook (#8224)
Fix so folder search parameters are honored by subscriptions_option plugin (#8312)
Fix password change with Directadmin driver (#8322, #8329)
Fix so css files in plugins/jqueryui/themes will be minified too (#8337)
Fix handling of unicode/special characters in custom From input (#8357)
Fix some PHP8 compatibility issues (#8363)
Fix chpass-wrapper.py helper compatibility with Python 3 (#8324)
Fix scrolling and missing Close button in the Select image dialog in Elastic/mobile (#8367)
Security: fix cross-site scripting (XSS) via HTML messages with malicious CSS content

]]>https://forum.cloudron.io/topic/6254/roundcube-1-5-2-released-with-security-fixesRSS for NodeFri, 16 Oct 2026 02:49:14 GMTFri, 31 Dec 2021 10:51:46 GMT60<![CDATA[Reply to Roundcube 1.5.2 released with Security fixes on Tue, 04 Jan 2022 00:27:43 GMT]]>@nebulon there was bug in the package using the incorrect imap port, I have pushed a fix.

]]>https://forum.cloudron.io/post/41129https://forum.cloudron.io/post/41129Tue, 04 Jan 2022 00:27:43 GMT<![CDATA[Reply to Roundcube 1.5.2 released with Security fixes on Mon, 03 Jan 2022 12:03:33 GMT]]>New app is now published...turned out to only have a regression with our current Cloudron master not with the released Cloudron version.

]]>https://forum.cloudron.io/post/41099https://forum.cloudron.io/post/41099Mon, 03 Jan 2022 12:03:33 GMT<![CDATA[Reply to Roundcube 1.5.2 released with Security fixes on Sun, 02 Jan 2022 17:42:24 GMT]]>@necrevistonnezr mostly the package is ready, however there seems to be an imap ssl regression or at least it can't connect to the server anymore. The error as such does not give much clue, so I'm investigating....

]]>https://forum.cloudron.io/post/41076https://forum.cloudron.io/post/41076Sun, 02 Jan 2022 17:42:24 GMT