iRedMail-1.6.6 has been released, with SECURITY UPDATE of Roundcube.

Don't forget to check out our new product "Spider Email Archiver": a lightweight, on-premises email archiving software: https://spiderd.io/
--------

Dear all,

iRedMail-1.6.6 has been released. It ships latest Roundcube v1.6.4 which addresses a cross-site scripting (XSS) vulnerability.

• Download from our website: https://www.iredmail.org/download.html

• Upgrade your existing iRedMail server: https://docs.iredmail.org/iredmail.releases.html

Here's major changes since iRedMail-1.6.5:

Improvements

• Fail2ban: Do not ban client which triggers `lost connection after UNKNOWN` error.

Updated packages

• Roundcube -> 1.6.4. SECURITY UPDATE. Release notes: https://roundcube.net/news/2023/10/16/s … 4-released

• netdata -> 1.43.0