Merge pull request #78 from roundcube/1.7-rc2

Author: pabzm

_data/releases.json

@@ -42,25 +42,25 @@
     },
     "beta": {
         "name": "Release candidate",
-        "version": "1.7-rc",
+        "version": "1.7-rc2",
         "sources": [
             {
                 "package": "Dependent",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc/roundcubemail-1.7-rc.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc2/roundcubemail-1.7-rc2.tar.gz",
                 "size": "4.0 MB",
-                "checksum": "6c61389ef46cbcbf5c9feafc6f094d40f6f182547e2dd97b63d93068f26c4a80"
+                "checksum": "fc9d3886a4e45cbcd4156df959594f27bcf9c923bc987817415c91ef55ea228e"
             },
             {
                 "package": "Complete",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc/roundcubemail-1.7-rc-complete.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc2/roundcubemail-1.7-rc2-complete.tar.gz",
                 "size": "6.1 MB",
-                "checksum": "0f2c75a26a6fd41a6d5aa5acd41838169f0b08e59e9313ad21b8af234cb806df"
+                "checksum": "65afc7a7d603241b7bb15f8d66ebe02f6c39c4c99fc99b2c16616a0c328eccef"
             },
             {
                 "package": "Framework",
-                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc/roundcube-framework-1.7-rc.tar.gz",
+                "url": "https://github.com/roundcube/roundcubemail/releases/download/1.7-rc2/roundcube-framework-1.7-rc2.tar.gz",
                 "size": "1.1 MB",
-                "checksum": "9221513dc33c3066df3d4ec025671415939b67903095af5ced784d3d21b9dab7"
+                "checksum": "a3c1982e31b597384beffdb11bd37db56bd7267a6f78949cafd932b8d560e686"
             }
         ]
     }

_posts/2025-12-15-roundcube-1.7-rc2-released.md

@@ -0,0 +1,21 @@
+---
+layout: article
+title: Roundcube 1.7 RC2 released
+tags: releases beta
+---
+
+We just published the second release candidate for the next major version 1.7 of Roundcube webmail.
+
+This release fixes two security issues and one syntax error in a database migration file for Postgres databases.
+
+The changes are:
+
+- Fix Cross-Site-Scripting vulnerability via SVG’s animate tag reported by Valentin T., CrowdStrike.
+- Fix Information Disclosure vulnerability in the HTML style sanitizer reported by somerandomdev.
+- Fix syntax error in DDL scripts for Postgres (#10052)
+
+We believe it is production ready, but we recommend to test it on a separate environment.
+
+Migrate existing configs with either the `installto.sh` or the `update.sh` scripts.
+
+And don't forget to backup your data before installing it!