Dev March 2017

dev@lists.roundcube.net

3 participants
2 discussions

Enigma: Inline-PGP not decrypted when embedded in HTML
by Joachim Fahrner 13 Mar '17

13 Mar '17

Hi, Thunderbird creates strange Inline-PGP messages when sending HTML. I got the following mail: User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit <html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> -----BEGIN PGP MESSAGE----- Charset: utf-8 Version: GnuPG v2.0.20 (MingW32) hQEMA/TVXfPpchmrAQgAmA2577rkRl7151xthejm/4p0GZyNAw+vhGSF8HmHGPJV I9q5b+c/Ul3454AsqGfSrI0MDTnv2PO2MOkC0Th6WlW/9QvOo6IutRIbxiQgnzCP 1pMCMJgj4jSpynla2Gpe41FRHxh6ZNlndZ60mq7a2xQLqjUPh9+K2BH/6tQko33N ... 2e7t2IeG/8uMkV2iPWNcxA== =KUPp -----END PGP MESSAGE----- </body> </html> It seems this strange format is not handled by Enigma. Mailvelope can decrypt these messages without problems. Regards Jochen

2 1

Updates 1.2.4 and 1.1.8 released
by Thomas Bruederli 10 Mar '17

10 Mar '17

Dear subscribers We just published another update to both stable versions 1.2 and 1.1 delivering important bug fixes and improvements which we picked from the upstream branch. Included is a fix for a recently reported XSS vulnerability within CSS styles inside an SVG tag. See the full changelog for 1.2.4 in the wiki [1] and for version 1.1.8 in the release notes [2]. Both versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. Download them from GitHub via https://roundcube.net/download. As usual, don't forget to backup your data before updating! Best, Thomas [1] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-123 [2] https://github.com/roundcube/roundcubemail/releases/tag/1.1.8

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev March 2017