openSUSE Leap 16.0 roundcubemail Important Remote Image Fix 2026-20586-1

This update for roundcubemail fixes the following issues:

Changes in roundcubemail:

- update to 1.6.15

This is a security update to the stable version 1.6 of Roundcube Webmail.

It provides fixes to some regressions introduced in the previous release

as well a recently reported security vulnerability:

SVG Animate FUNCIRI Attribute Bypass \u2014 Remote Image Loading via fill/filter/stroke, reported by class_nzm.

This version is considered stable and we recommend to update all productive

installations of Roundcube 1.6.x with it. Please do backup your data before updating!

+ Fix regression where mail search would fail on non-ascii search criteria (#10121)

+ Fix regression where some data url images could get ignored/lost (#10128)

+ Fix SVG Animate FUNCIRI Attribute Bypass \u2014 Remote Image Loading via fill/filter/stroke (bsc#1261157)

- update to 1.6.14

This is a security update to the stable version 1.6 of Roundcube Webmail.

+ Fix Postgres connection using...