We have successfully completed an urgent security update for our Roundcube Webmail system, moving from version 1.7.4 to 1.7.5.
This update fixes several newly discovered security weaknesses that could have allowed bad actors to compromise the system.
What This Update Fixes:
- Email Safety: Fixed several flaws that allowed hackers to manipulate email headers, inject malicious commands, or trick the system into sending unauthorized messages.
- Malicious Content Blocking: Blocked clever tricks that attackers could use to bypass our security and hide tracking scripts or harmful code inside image files (like SVGs) and email styling (CSS).
- System Protection: Patched vulnerabilities that could have let unauthorized users change passwords for other accounts, sneak into server sessions, or overload the server using image-processing tools.
- Network & Privacy Guard: Upgraded our web filters to prevent hackers from tricking our server into accessing private internal systems or bypassing standard security limits.
No action is required from you. Your webmail is already updated, secure, and ready to use.