New security release

alecpl · alecpl · commit cf728d21f909 · 2026-03-29T12:11:33.000+02:00
diff --git a/_data/releases.json b/_data/releases.json
@@ -1,25 +1,25 @@
 {
     "stable": {
         "name": "Stable version",
-        "version": "1.6.14",
+        "version": "1.6.15",
         "sources": [
             {
                 "package": "Dependent",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.14/roundcubemail-1.6.14.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.15/roundcubemail-1.6.15.tar.gz",
                 "size": "3.7 MB",
-                "checksum": "70816db28bd7d5c16ba94e518a68368109542bf78bf3696e568385283c46027a"
+                "checksum": "9e415d4f6c29a60c9495a614ffeb9e2786601f74093b4a0a2b9cba0c32535efa"
             },
             {
                 "package": "Complete",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.14/roundcubemail-1.6.14-complete.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.15/roundcubemail-1.6.15-complete.tar.gz",
                 "size": "5.6 MB",
-                "checksum": "4c67510729c10bd30bd064e87ebaf3f9a2d26230804862430580260b86a01609"
+                "checksum": "48c9f212c77460132491f670abaf440b765c8276268349a690913764d26afbef"
             },
             {
                 "package": "Framework",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.14/roundcube-framework-1.6.14.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.15/roundcube-framework-1.6.15.tar.gz",
                 "size": "1.1 MB",
-                "checksum": "e35134263899c36ea9e981a9f9a5b6561dbcf59450f487dbca5196ffecb229b5"
+                "checksum": "a90770a8b0a17dfe4fe78d98abce1c4219c4c05bb2b6f08178d9cdff587434bf"
             }
         ]
     },
@@ -33,34 +33,34 @@
         "name": "LTS versions",
         "sources": [
             {
-                "package": "1.5.14 - Complete",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.5.14/roundcubemail-1.5.14-complete.tar.gz",
+                "package": "1.5.15 - Complete",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.5.15/roundcubemail-1.5.15-complete.tar.gz",
                 "size": "7.2 MB",
-                "checksum": "c12dc9179c3ad6d3b3c4e7af080aef887cf9e4e6fb13b628343d135fcc8263a1"
+                "checksum": "ed96857435066e8cedc0dfa7c3965fd89263e69ba4951385f09939a38b938c28"
             }
         ]
     },
     "beta": {
         "name": "Release candidate",
-        "version": "1.7-rc5",
+        "version": "1.7-rc6",
         "sources": [
             {
                 "package": "Dependent",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc5/roundcubemail-1.7-rc5.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc6/roundcubemail-1.7-rc6.tar.gz",
                 "size": "4.0 MB",
-                "checksum": "33139a02828982b3359b73668ddcfb9b81e99a03b1864c94a14373770fe086c9"
+                "checksum": "97a2c6fa98d997a5a0689680d73586d3b120e44755704be5c612bcc7f46df75f"
             },
             {
                 "package": "Complete",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc5/roundcubemail-1.7-rc5-complete.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc6/roundcubemail-1.7-rc6-complete.tar.gz",
                 "size": "6.1 MB",
-                "checksum": "2062e74731568f44e026d532794a53633ea85bd6b45a78e341fed9b33cda3590"
+                "checksum": "c68a7cf44c2f23adc76b3283aadb09c3d2921bd24efec1e9e14e57927c924265"
             },
             {
                 "package": "Framework",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc5/roundcube-framework-1.7-rc5.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc6/roundcube-framework-1.7-rc6.tar.gz",
                 "size": "1.1 MB",
-                "checksum": "1192b7618fa9b63f340103a50c9828676f8ccc32ff72eefdc5328123fdf37512"
+                "checksum": "4ad67b65f28c4c15a8e16e93f2c6aa4c9ab05191fec796491980a88a1b4d0eff"
             }
         ]
     }
diff --git a/_posts/2026-03-29-security-updates-1.7-rc6-1.6.15-1.5.15.md b/_posts/2026-03-29-security-updates-1.7-rc6-1.6.15-1.5.15.md
@@ -0,0 +1,20 @@
+---
+layout: article
+title: Security updates 1.7-rc6, 1.6.15 and 1.5.15 released
+tags: releases updates security
+---
+
+We just published security updates to the 1.6 and 1.5 LTS versions of Roundcube Webmail, as well as a release candidate for coming 1.7.
+They contain fixes for recently reported set of security vulnerabilities.
+
+## Security fixes
+
+- SVG Animate FUNCIRI Attribute Bypass — Remote Image Loading via fill/filter/stroke, reported by class_nzm.
+
+See the full changelogs in the release notes on the Github download pages for the updated versions
+
+- [1.7-rc6](https://github.com/roundcube/roundcubemail/releases/tag/1.7-rc6)
+- [1.6.15](https://github.com/roundcube/roundcubemail/releases/tag/1.6.15)
+- [1.5.15](https://github.com/roundcube/roundcubemail/releases/tag/1.5.15).
+
+We strongly recommend to update your productive installations of Roundcube with this new versions.

Original file line number	Diff line number	Diff line change
`@@ -1,25 +1,25 @@`
`1`	`1`	`{`
`2`	`2`	`"stable": {`
`3`	`3`	`"name": "Stable version",`
`4`		`- "version": "1.6.14",`
	`4`	`+ "version": "1.6.15",`
`5`	`5`	`"sources": [`
`6`	`6`	`{`
`7`	`7`	`"package": "Dependent",`
`8`		`- "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.14/roundcubemail-1.6.14.tar.gz",`
	`8`	`+ "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.15/roundcubemail-1.6.15.tar.gz",`
`9`	`9`	`"size": "3.7 MB",`
`10`		`- "checksum": "70816db28bd7d5c16ba94e518a68368109542bf78bf3696e568385283c46027a"`
	`10`	`+ "checksum": "9e415d4f6c29a60c9495a614ffeb9e2786601f74093b4a0a2b9cba0c32535efa"`
`11`	`11`	`},`
`12`	`12`	`{`
`13`	`13`	`"package": "Complete",`
`14`		`- "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.14/roundcubemail-1.6.14-complete.tar.gz",`
	`14`	`+ "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.15/roundcubemail-1.6.15-complete.tar.gz",`
`15`	`15`	`"size": "5.6 MB",`
`16`		`- "checksum": "4c67510729c10bd30bd064e87ebaf3f9a2d26230804862430580260b86a01609"`
	`16`	`+ "checksum": "48c9f212c77460132491f670abaf440b765c8276268349a690913764d26afbef"`
`17`	`17`	`},`
`18`	`18`	`{`
`19`	`19`	`"package": "Framework",`
`20`		`- "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.14/roundcube-framework-1.6.14.tar.gz",`
	`20`	`+ "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.15/roundcube-framework-1.6.15.tar.gz",`
`21`	`21`	`"size": "1.1 MB",`
`22`		`- "checksum": "e35134263899c36ea9e981a9f9a5b6561dbcf59450f487dbca5196ffecb229b5"`
	`22`	`+ "checksum": "a90770a8b0a17dfe4fe78d98abce1c4219c4c05bb2b6f08178d9cdff587434bf"`
`23`	`23`	`}`
`24`	`24`	`]`
`25`	`25`	`},`
`@@ -33,34 +33,34 @@`
`33`	`33`	`"name": "LTS versions",`
`34`	`34`	`"sources": [`
`35`	`35`	`{`
`36`		`- "package": "1.5.14 - Complete",`
`37`		`- "url": "https://github.com/roundcube/roundcubemail/releases/download/1.5.14/roundcubemail-1.5.14-complete.tar.gz",`
	`36`	`+ "package": "1.5.15 - Complete",`
	`37`	`+ "url": "https://github.com/roundcube/roundcubemail/releases/download/1.5.15/roundcubemail-1.5.15-complete.tar.gz",`
`38`	`38`	`"size": "7.2 MB",`
`39`		`- "checksum": "c12dc9179c3ad6d3b3c4e7af080aef887cf9e4e6fb13b628343d135fcc8263a1"`
	`39`	`+ "checksum": "ed96857435066e8cedc0dfa7c3965fd89263e69ba4951385f09939a38b938c28"`
`40`	`40`	`}`
`41`	`41`	`]`
`42`	`42`	`},`
`43`	`43`	`"beta": {`
`44`	`44`	`"name": "Release candidate",`
`45`		`- "version": "1.7-rc5",`
	`45`	`+ "version": "1.7-rc6",`
`46`	`46`	`"sources": [`
`47`	`47`	`{`
`48`	`48`	`"package": "Dependent",`
`49`		`- "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc5/roundcubemail-1.7-rc5.tar.gz",`
	`49`	`+ "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc6/roundcubemail-1.7-rc6.tar.gz",`
`50`	`50`	`"size": "4.0 MB",`
`51`		`- "checksum": "33139a02828982b3359b73668ddcfb9b81e99a03b1864c94a14373770fe086c9"`
	`51`	`+ "checksum": "97a2c6fa98d997a5a0689680d73586d3b120e44755704be5c612bcc7f46df75f"`
`52`	`52`	`},`
`53`	`53`	`{`
`54`	`54`	`"package": "Complete",`
`55`		`- "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc5/roundcubemail-1.7-rc5-complete.tar.gz",`
	`55`	`+ "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc6/roundcubemail-1.7-rc6-complete.tar.gz",`
`56`	`56`	`"size": "6.1 MB",`
`57`		`- "checksum": "2062e74731568f44e026d532794a53633ea85bd6b45a78e341fed9b33cda3590"`
	`57`	`+ "checksum": "c68a7cf44c2f23adc76b3283aadb09c3d2921bd24efec1e9e14e57927c924265"`
`58`	`58`	`},`
`59`	`59`	`{`
`60`	`60`	`"package": "Framework",`
`61`		`- "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc5/roundcube-framework-1.7-rc5.tar.gz",`
	`61`	`+ "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc6/roundcube-framework-1.7-rc6.tar.gz",`
`62`	`62`	`"size": "1.1 MB",`
`63`		`- "checksum": "1192b7618fa9b63f340103a50c9828676f8ccc32ff72eefdc5328123fdf37512"`
	`63`	`+ "checksum": "4ad67b65f28c4c15a8e16e93f2c6aa4c9ab05191fec796491980a88a1b4d0eff"`
`64`	`64`	`}`
`65`	`65`	`]`
`66`	`66`	`}`