Security updates 1.6.12 and 1.5.12

Author: alecpl

_data/releases.json

@@ -1,25 +1,25 @@
 {
     "stable": {
         "name": "Stable version",
-        "version": "1.6.11",
+        "version": "1.6.12",
         "sources": [
             {
                 "package": "Dependent",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.11/roundcubemail-1.6.11.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.12/roundcubemail-1.6.12.tar.gz",
                 "size": "3.7 MB",
-                "checksum": "199e2713f55da2e91af0e2382b2abf7dab6e1bf1f773317c8a4e64dadc0fae8f"
+                "checksum": "265afb0851cdcee94a26f6042c32b7ec599bb3b079bbd5dd5335f05cd6ffa722"
             },
             {
                 "package": "Complete",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.11/roundcubemail-1.6.11-complete.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.12/roundcubemail-1.6.12-complete.tar.gz",
                 "size": "5.6 MB",
-                "checksum": "a230e432065555bfa27bea3fcf4ac672f2359ef28ad84f5945ea3ccf702e7466"
+                "checksum": "180b485dfde1898b2f1ac8046b34063898d263d7605fc64c41e230e3418f2a30"
             },
             {
                 "package": "Framework",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.11/roundcube-framework-1.6.11.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.6.12/roundcube-framework-1.6.12.tar.gz",
                 "size": "1.1 MB",
-                "checksum": "a2a1fe1c7e6ed5895b6d98393e038b33b0ddf9b7d80eed4fb36192b2c20e8694"
+                "checksum": "926c61d570843c5b30e4c0c7779f45e2a58f7f0668294d3ff6d1a597080ee904"
             }
         ]
     },
@@ -33,10 +33,10 @@
         "name": "LTS versions",
         "sources": [
             {
-                "package": "1.5.11 - Complete",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.5.11/roundcubemail-1.5.11-complete.tar.gz",
+                "package": "1.5.12 - Complete",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.5.12/roundcubemail-1.5.12-complete.tar.gz",
                 "size": "7.2 MB",
-                "checksum": "1545b859235befd39387f9a9266faf0c7286b5c4df00f7637601845484a4fcfc"
+                "checksum": "f2c850f537fba8c9b9674f957a7fd54bd1f00a4edc256c1b52806df8ed0581a3"
             }
         ]
     },

_posts/2025-12-13-security-updates-1.6.12-and-1.5.12.md

@@ -0,0 +1,18 @@
+---
+layout: article
+title: Security updates 1.6.12 and 1.5.12 released
+tags: releases updates security
+---
+
+We just published security updates to the 1.6 and 1.5 LTS versions of Roundcube Webmail.
+They both contain fixes for recently reported two security vulnerabilities.
+
+## Security fixes
+
+- Fix Cross-Site-Scripting vulnerability via SVG's animate tag reported by Valentin T., CrowdStrike.
+- Fix Information Disclosure vulnerability in the HTML style sanitizer reported by somerandomdev.
+
+See the full changelogs in the release notes on the Github download pages for the updated versions
+[1.6.12](https://github.com/roundcube/roundcubemail/releases/tag/1.6.12) and [1.5.12](https://github.com/roundcube/roundcubemail/releases/tag/1.5.12).
+
+We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.5.x with this new versions.