Roundcube 1.4.10, 1.3.16, and 1.2.13 has been released. Roundcube is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an email client, including MIME support, address book, folder manipulation, message searching and spell checking.

We just published security updates to the stable version 1.4 and the LTS versions 1.3 and 1.2 of Roundcube Webmail. They all contain fixes to a recently reported stored XSS vulnerability found and kindly reported by Alex Birnberg.

The 1.4.10 release also contains a few general improvements from our issue tracker.

See the full changelogs in the release notes on the Github download pages for the updated versions:

https://github.com/roundcube/roundcubemail/releases/tag/1.4.10

https://github.com/roundcube/roundcubemail/releases/tag/1.3.16

https://github.com/roundcube/roundcubemail/releases/tag/1.2.13

We strongly recommend to update all productive installations of Roundcube with these new versions.

Download them from https://roundcube.net/download/

Best wishes and a happy new year!

Alec & Thomas