openSUSE: 2024:0257-1 Moderate: roundcubemail XSS Issues Fixed

This update for roundcubemail fixes the following issues:

Update to 1.6.7

This is a security update to the stable version 1.6 of Roundcube Webmail.

It provides a fix to a recently reported XSS vulnerabilities:

* Fix cross-site scripting (XSS) vulnerability in handling SVG animate

attributes. Reported by Valentin T. and Lutz Wolf of CrowdStrike.

* Fix cross-site scripting (XSS) vulnerability in handling list columns

from user preferences. Reported by Huy Nguyễn Phạm Nhật.

* Fix command injection via crafted im_convert_path/im_identify_path on

Windows. Reported by Huy Nguyễn Phạm Nhật.

CHANGELOG

* Makefile: Use phpDocumentor v3.4 for the Framework docs (#9313)

* Fix bug where HTML entities in URLs were not decoded on HTML to plain

text conversion (#9312)

* Fix bug in collapsing/expanding folders with some special characters

in names (#9324)

* Fix PHP8 warnings...