====================================================================


                             CERT-Renater

                 Note d'Information No. 2018/VULN380
_____________________________________________________________________

DATE                : 13/11/2018

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Roundcube versions prior to 1.3.8.

=====================================================================
http://lists.roundcube.net/pipermail/announce/2018-October/000163.html
_____________________________________________________________________

Dear subscribers

We proudly announce the next service release to update the stable
version 1.3.

It contains fixes to several bugs backported from the master branch
including a security fix for a reported XSS vulnerability plus updates
to ensure compatibility with PHP 7.3 and recent versions of
Courier-IMAP, Dovecot and MySQL 8.

See the full changelog in the release notes on the Github download page
[1].

This release is considered stable and we recommend to update all
productive installations of Roundcube with this version. Download it
from https://roundcube.net.

Best,
Alec & Thomas

[1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.8

=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================