Security fixes behind the scenes
Roundcube, the webmail interface used by many email services, released versions 1.6.20 and 1.7.5 on October 19. Both fix security issues, and the project recommends updating installations in active use.
The fixes address how Roundcube blocks remote content in messages, handles email headers and processes images. They change how the software handles incoming email data, rather than redesigning the inbox.
Who should install the update?
If you use Roundcube through your hosting provider’s or organization’s website, its administrator will normally handle the update. You can ask which version the service uses and whether it has applied the October patches.
If you manage your own installation, the official announcement links to release notes for both branches. It lists the vulnerabilities fixed, but does not establish that every account has been attacked. Using Roundcube does not, on its own, mean someone has accessed your messages.
Sources and context
Sources used for this article. Follow the links to read the original material.
See the linked sources for more information. Corrections and contact →
