http://iredmail.org/wiki/index.php?titl … be.Webmail
needs updating.
http://roundcube.net/ no longer offers older roundcubemail-0.8.6
ZhangHuangbin wrote:
Hi mastini,
Thanks for your remind.
I re-packed iRedMail-0.8.4 with roundcubemail-0.8.6, so if you're going to setup a new iRedMail server, you don't need to worry about this vulnerability. https://bitbucket.org/zhb/iredmail/downloads