Skip to content

cypht

v2.12.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

atom e-mail ews imap jmap news-reader
+6 more
php pop3 rss smtp webmail webmail-client

Affected surfaces

rce_ssrf deps

Summary

AI summary

Broad release touches Bug fixes, Maintenance & Infrastructure, other, and frontend.

Full changelog

82 changes from 8 contributors (1 new contributor). 68 files were affected.

What's Changed

New features

  • feat(frontend/backend): enhance Tags module with colors, refactor, and improved test coverage by @Shadow243 in https://github.com/cypht-org/cypht/pull/2030

Bug fixes

  • fix(other): profile tests and make server_stmp_and_imap_add work correclty with a real smtp & imap server by @Shadow243 in https://github.com/cypht-org/cypht/pull/1553
  • fix(module/imap): improve MSTNEF attachment parsing safety and temp file handling by @mercihabam in https://github.com/cypht-org/cypht/pull/2027
  • fix(module/imap): send IMAP ID when X-CM-EXT-1 is advertised by @ThouGyeongcho in https://github.com/cypht-org/cypht/pull/2029
  • fix(frontend): mobile css tweaks for several sections by @pom2ter in https://github.com/cypht-org/cypht/pull/2034
  • fix(backend): remove redundant post-package-install script by @Shadow243 in https://github.com/cypht-org/cypht/pull/2039
  • fix(frontend): invalidate message page cache after rebuild by @camilevahviraki in https://github.com/cypht-org/cypht/pull/2041
  • fix(other): update readme inbox screenshot by @Baraka24 in https://github.com/cypht-org/cypht/pull/2042
  • fix(other): disable reply all when only recipient is current user by @camilevahviraki in https://github.com/cypht-org/cypht/pull/1935
  • fix(module/feeds): block SSRF to private and internal feed URLs by @IrAlfred in https://github.com/cypht-org/cypht/pull/2024
  • fix(other): fix proxy-related login loop and cookie domain mismatch by @IrAlfred in https://github.com/cypht-org/cypht/pull/2045
  • fix(docker): fix Docker UI when ENABLE_DEBUG is enabled by @IrAlfred in https://github.com/cypht-org/cypht/pull/2046

Maintenance & Infrastructure

  • fix(other): point docker compose to latest Cypht release 2.11.0 by @IrAlfred in https://github.com/cypht-org/cypht/pull/2025
  • fix(release): update version reference to 2.11.1 for upcoming release by @IrAlfred in https://github.com/cypht-org/cypht/pull/2035
  • fix(release): point docker compose to latest Cypht release 2.11.1 by @IrAlfred in https://github.com/cypht-org/cypht/pull/2036
  • fix(release): update version reference to 2.11.2 for upcoming release by @IrAlfred in https://github.com/cypht-org/cypht/pull/2047
  • fix(release): point docker compose to latest Cypht release 2.11.2 by @IrAlfred in https://github.com/cypht-org/cypht/pull/2048
  • fix(release): update version reference to 2.12.0 for upcoming release by @IrAlfred in https://github.com/cypht-org/cypht/pull/2053

Dependency Updates

  • build(deps): bump guzzlehttp/psr7 from 2.12.1 to 2.13.0 by @dependabot[bot] in https://github.com/cypht-org/cypht/pull/2050
  • build(deps): bump guzzlehttp/guzzle from 7.12.1 to 7.15.1 by @dependabot[bot] in https://github.com/cypht-org/cypht/pull/2044

Tests & Quality Assurance

  • fix(unit): add 240+ tests across sievefilters, lib and core modules to improve coverage by @Shadow243 in https://github.com/cypht-org/cypht/pull/2026
  • fix(unit): fix PHPUnit warnings and PHP 8.4 deprecations in test suite by @IrAlfred in https://github.com/cypht-org/cypht/pull/2031

New Contributors

  • @ThouGyeongcho made their first contribution in https://github.com/cypht-org/cypht/pull/2029

Full Changelog: https://github.com/cypht-org/cypht/compare/v2.11.0...v2.12.0

Security Fixes

  • Block SSRF to private and internal feed URLs in the feeds module

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track cypht

Get notified when new releases ship.

Sign up free

About cypht

Cypht: Lightweight Open Source webmail aggregator [PHP, JS]. Supports IMAP/SMTP, JMAP and EWS (Exchange Web Services)

All releases →

Related context

Related tools

Beta — feedback welcome: [email protected]