d95cb82c4f
This update fixes a serious security flaw, which can lead to arbitrary command execution on the server running roundcube. I could not find a formal changelog, but here's what the website writes: There were two security issues reported which are now fixed. The first was as possible code injection using the html2text conversion script. The other exploit used the unchecked size parameters of the quota image to let PHP create huge images eating up all the server memory. |
||
---|---|---|
.. | ||
files | ||
patches | ||
DESCR | ||
distinfo | ||
Makefile | ||
MESSAGE | ||
options.mk | ||
PLIST |