Debian Security Advisory

DLA-613-2 roundcube -- LTS security update

Date Reported:
27 Jul 2017
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 843795, Bug 851214.
More information:

The security update announced as DLA-613-1 caused a regression. A missing null parameter set the $task variable in the rcmail_url() function to a boolean value which led to service not available errors when viewing attached images. Updated packages are now available to correct this issue.

For Debian 7 Wheezy, these problems have been fixed in version 0.7.2-9+deb7u8.

We recommend that you upgrade your roundcube packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: