Bump version to 1.2.10

4 years ago · 1a7b603875
parent cceeff2472
commit 1a7b603875
5 changed files with 10 additions and 4 deletions
--- a/6
+++ b/6
@ -1,7 +1,13 @@
 CHANGELOG Roundcube Webmail
 ===========================

+RELEASE 1.2.10
+--------------
 - Fix missing message-htmlpart1 class breaking inline CSS (#6493)
+- Security: Fix XSS issue in handling of CDATA in HTML messages
+- Security: Fix remote code execution via crafted 'im_convert_path' or 'im_identify_path' settings
+- Security: Fix local file inclusion (and code execution) via crafted 'plugins' option
+- Security: Fix CSRF bypass that could be used to log out an authenticated user (#7302)

 RELEASE 1.2.9
 -------------
--- a/index.php
+++ b/index.php
@ -2,7 +2,7 @@
 /**
 +-------------------------------------------------------------------------+
 | Roundcube Webmail IMAP Client                                           |
- | Version 1.2.9                                                           |
+ | Version 1.2.10                                                          |
 |                                                                         |
 | Copyright (C) 2005-2017, The Roundcube Dev Team                         |
 |                                                                         |
--- a/installer/index.php
+++ b/installer/index.php
@ -3,7 +3,7 @@
 /**
 +-------------------------------------------------------------------------+
 | Roundcube Webmail setup tool                                            |
- | Version 1.2.9                                                           |
+ | Version 1.2.10                                                          |
 |                                                                         |
 | Copyright (C) 2009-2017, The Roundcube Dev Team                         |
 |                                                                         |
--- a/program/include/iniset.php
+++ b/program/include/iniset.php
@ -21,7 +21,7 @@
 */

 // application constants
-define('RCMAIL_VERSION', '1.2.9');
+define('RCMAIL_VERSION', '1.2.10');
 define('RCMAIL_START', microtime(true));

 if (!defined('INSTALL_PATH')) {
--- a/program/lib/Roundcube/bootstrap.php
+++ b/program/lib/Roundcube/bootstrap.php
@ -55,7 +55,7 @@ foreach ($config as $optname => $optval) {
 }

 // framework constants
-define('RCUBE_VERSION', '1.2.9');
+define('RCUBE_VERSION', '1.2.10');
 define('RCUBE_CHARSET', 'UTF-8');

 if (!defined('RCUBE_LIB_DIR')) {