A new version of MailWatch is released in the wild.

tl;dr

This release contains a security fix.

If your installation make use of auto creation of user from IMAP login (i.e. IMAP_AUTOCREATE_VALID_USER set to true) you MUST run this query on your MailWatch database:

UPDATE `users` SET `fullname` = `username` WHERE `type`='U' AND `password` IS NULL

Changelog

Security

  • Fix clear password display when user is auto created by IMAP auth

Fixes

  • Add client IP in sorting input validation