Major Security Update 7.8.1

Release overview

Release Date: 27 March 2018
Release Versions: On-Premises v7.8.1 + v7.8.0.6

⚠ Please Note:
Version 7.8.1 contains major security fixes for the atmail 7.8 release. For full details on the atmail 7.8 release, click here.

Release highlights

Summary

Description

Status

Component(S)

CVE-2018-6789

atmail 7.8.0.5 - exim-4.87-2
atmail 7.8.1 - exim-4.90.1

RELEASED

Core, Exim

Summary	Description	Status	Component(S)
read-flag set without reading (Accessibility mode)	On accessibility mode, Atmail might set a read-flag WITHOUT reading a message.	RESOLVED	MOBILE UI
MailSploit A7 WebUI fails to sanitize non-ASCII chars in headers	https://www.mailsploit.com/index#demo https://www.ietf.org/rfc/rfc1342.txt https://tools.ietf.org/html/rfc2822	RESOLVED	WebUI, WEBMAIL
webmail > mail > folder moved by drag-and-drop fails to move	I'll attempt to move the folder by drag-and-drop on the reception screen, an error will occur.	RESOLVED	WebUI, WEBMAIL
Reply to Display-Name fails to account for ,	1. When a user chooses PC mode and tries to reply a mail which has the display-name like 'Name,Inc' , it seems to remove comma in a TO field and a BODY textarea. 2. And when a user chooses Accessibility mode and tries to reply the same mail, it seems to be displayed as two string separately.	RESOLVED	WebUI, MOBILE UI, WEBMAIL
Webmail > Contacts > Groups > after contacts added, contacts list display is incorrect.	When contacts added with group selected, list display is incorrect.	RESOLVED	WebUI, WEBMAIL
Multi-lined subject isn't displayed correctly	When a subject header is multi-lined and has a MIME-encoded string, it wouldn't display it correctly.	RESOLVED	WebUI, WEBMAIL, MAIL