Hi I guess if package 1.2.3 cannot be back ported to jessie due dependencies issues, and there is no exception that would leave jessie users to backport manually to 1.1.7 that includes the fix
https://roundcube.net/news/2016/11/28/updates-1.2.3-and-1.1.7-released Issue it is quite severe, I wonder if they would reconsider the exception to stay on 1.1.X. Regards Juan.-