Have I gone blind, updated to 1.6.11 and it might have been nuked earlier we migrated up from earlier series, but there used to be a little tiny person with plus sign to quickly add a recipient to contacts, it seems to be gone, so obviously I have not set something proper in 1.6, any suggestions?

On Sun, Jun 1, 2025 at 6:26 PM Aleksander Machniak <alec@alec.pl> wrote:

We just published security updates to the 1.6 and 1.5 LTS versions of
Roundcube Webmail. They both contain a fix for recently reported
security vulnerability.

Security fixes:

- Fix Post-Auth RCE via PHP Object Deserialization reported by firs0v.

See the full changelogs in the release notes on the Github download
pages for the updated versions 1.6.11 and 1.5.10.

https://github.com/roundcube/roundcubemail/releases/tag/1.6.11
https://github.com/roundcube/roundcubemail/releases/tag/1.5.10

We strongly recommend to update all productive installations of
Roundcube 1.6.x and 1.5.x with this new versions.

--
Alec
_______________________________________________
Users mailing list -- users@lists.roundcube.net
To unsubscribe send an email to users-leave@lists.roundcube.net