<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">The store has available Roundcube 1.6.9 in the store, which is available for all platforms, including 5208R - However, there may also be PHP and/or mysql upgrades required. It’s really time to upgrade beyond 5208 to be honest.<div><br></div><div>Greg.<br><div><div><br></div><div><p style="margin: 0px; font-style: normal; font-variant-caps: normal; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; color: rgb(0, 0, 0);"><br></p><div><blockquote type="cite"><div>On 31 Oct 2024, at 2:23 am, Darren Shea via Blueonyx <blueonyx@mail.blueonyx.it> wrote:</div><br class="Apple-interchange-newline"><div><div>CISA just announced there is a Roundcube exploit which can be exploited:<br>"Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG<br>animate attributes."<br><br>https://www.cve.org/CVERecord?id=CVE-2024-37383<br><br>Our ancient BO 5208R system is running Roundcube 1.02 from the BO store<br>(Solarspeed) - is there a safe way to update that to a newer version without<br>breaking the webmail capabilities?<br><br>Thanks,<br> Darren<br><br>_______________________________________________<br>Blueonyx mailing list<br>Blueonyx@mail.blueonyx.it<br>http://mail.blueonyx.it/mailman/listinfo/blueonyx<br></div></div></blockquote></div><br></div></div></div></body></html>