Security releases

Author: alecpl

_data/releases.json

@@ -1,25 +1,25 @@
 {
     "stable": {
         "name": "Stable version",
-        "version": "1.6.12",
+        "version": "1.6.13",
         "sources": [
             {
                 "package": "Dependent",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.12/roundcubemail-1.6.12.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.13/roundcubemail-1.6.13.tar.gz",
                 "size": "3.7 MB",
-                "checksum": "265afb0851cdcee94a26f6042c32b7ec599bb3b079bbd5dd5335f05cd6ffa722"
+                "checksum": "1ee6a0877024b6ee73bda5050686487af7bc88301b2af3355a46c4ce8e327180"
             },
             {
                 "package": "Complete",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.12/roundcubemail-1.6.12-complete.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.13/roundcubemail-1.6.13-complete.tar.gz",
                 "size": "5.6 MB",
-                "checksum": "180b485dfde1898b2f1ac8046b34063898d263d7605fc64c41e230e3418f2a30"
+                "checksum": "bdd1bafe79149a6b63f699fa94e7626189ec60e2c37954de7e84ee685dbbf5bb"
             },
             {
                 "package": "Framework",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.12/roundcube-framework-1.6.12.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.13/roundcube-framework-1.6.13.tar.gz",
                 "size": "1.1 MB",
-                "checksum": "926c61d570843c5b30e4c0c7779f45e2a58f7f0668294d3ff6d1a597080ee904"
+                "checksum": "61a92c3152293f0e8401406e855a57ad8bea5b3f4b647565babe42658bbcddf8"
             }
         ]
     },
@@ -33,10 +33,10 @@
         "name": "LTS versions",
         "sources": [
             {
-                "package": "1.5.12 - Complete",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.5.12/roundcubemail-1.5.12-complete.tar.gz",
+                "package": "1.5.13 - Complete",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.5.13/roundcubemail-1.5.13-complete.tar.gz",
                 "size": "7.2 MB",
-                "checksum": "f2c850f537fba8c9b9674f957a7fd54bd1f00a4edc256c1b52806df8ed0581a3"
+                "checksum": "37a8309882d782fa0b39d0f6e1efaa443b96e720e9e2c51106fb230926cca2f9"
             }
         ]
     },

_posts/2026-02-08-security-updates-1.6.13-and-1.5.13.md

@@ -0,0 +1,18 @@
+---
+layout: article
+title: Security updates 1.6.13 and 1.5.13 released
+tags: releases updates security
+---
+
+We just published security updates to the 1.6 and 1.5 LTS versions of Roundcube Webmail.
+They both contain fixes for recently reported two security vulnerabilities.
+
+## Security fixes
+
+- Fix CSS injection vulnerability reported by CERT Polska.
+- Fix remote image blocking bypass via SVG content reported by nullcathedral.
+
+See the full changelogs in the release notes on the Github download pages for the updated versions
+[1.6.13](https://github.com/roundcube/roundcubemail/releases/tag/1.6.13) and [1.5.13](https://github.com/roundcube/roundcubemail/releases/tag/1.5.13).
+
+We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.5.x with this new versions.