[Tickets #15122] Re: Remote images are loaded when they should be blocked

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/15122
------------------------------------------------------------------------------
  Ticket             | 15122
  Updated By         | Git Commit <commits at lists.horde.org>
  Summary            | Remote images are loaded when they should be blocked
  Queue              | IMP
  Version            | FRAMEWORK_5_2
  Type               | Bug
  State              | Unconfirmed
  Priority           | 2. Medium
  Milestone          |
  Patch              | 1
  Owners             |
------------------------------------------------------------------------------


Git Commit <commits at lists.horde.org> (2025-05-18 13:13) wrote:

Changes have been made in Git (FRAMEWORK_6_0):

commit 891814ff4e9f6966641687ff869d9d39cd38d41a
Author: Wahnes <61080908+Wahnes at users.noreply.github.com>
Date:   Sun, 18 May 2025 14:57:25 +0200

fix: Horde Bug 15122: Fix privacy issue with remote images being  
loaded despite user's preference not to load remote images. May have  
security consequences, too. (contributed by Jens Wahnes).

This fixes an old bug from the Horde bug tracker, see  
https://bugs.horde.org/ticket/15122
As detailed in an article about yet another security issue there, the  
loading to remote images may have security implications. So this is a  
precaution to avoid any such issues.

  M lib/Mime/Viewer/Html.php

https://github.com/horde/imp/commit/891814ff4e9f6966641687ff869d9d39cd38d41a