I personal expect in mail-list "Roundcube Announce" only information about new releases. Now need to change to another mail-list or this still Announace group?Dana 23. stu 2019. 01:42 PM osoba Mathew Newton <mathew(a)newtonnet.co.uk> napisala je:
>
> It's not the spam that's of concern; it's the risk of malware from a fake announcement for a new version.
>
> On 23 November 2019 11:52:16 GMT+00:00, Alexander Nestorov <alexandernst(a)gmail.com> wrote:
>>
>> ...unless you want to get spammed...
>>
>>> El 23 nov 2019, a las 12:37, sergio+announce(a)outerface.net escribió:
>>>
>>> The list MUST accept mail ONLY FROM the core team, not from subscribers!
>>
>> ________________________________
>> Roundcube Announcement mailing list
>> announce(a)lists.roundcube.net
>> http://lists.roundcube.net/mailman/listinfo/announce
Dear subscribers
Short time after the release of the stable version 1.4.0 of Roundcube
Webmail we already publish the first service release. With the recent
release we missed to mention a few breaking changes since the last stable
version 1.3. We apologize for this and are now clarifying and correcting
these:
Breaking changes
----------------
(since 1.3.x)
* new defaults for smtp_* config options:
Upon many requests and in order to get closer to the default setup of most
SMTP servers, we changed the defaults as follows:
// SMTP port (default is 587)
$config[‘smtp_port’] = 587;
// SMTP username (if required). %u will use the current username for login
$config[‘smtp_user’] = ‘%u’;
// SMTP password (if required). %p will use the current user’s password
for login
$config[‘smtp_pass’] = ‘%p’;
* changed default password_charset to UTF-8:
Because of many complaints, we decided to choose a more sane default that
covers most setups and configurations.
* login page returning 401 Unauthorized status:
The new behavior that Roundcube 1.4 returns a 401 status code if the client
is not authenticated apparently was very unexpected and lead to monitoring
problems. Despite not having mentioned that change in the release notes, we
now partly reverted it so that 401 is only returned on login failures but
not on the first request to Roundcube which by definition is unauthorized.
Besides these three major concerns we heard from your much appreciated
feedback, we fixed a number of nasty bugs that sneaked into the 1.4.0
release. See the full changelog in the release notes on the Github download
page [1].
This release is considered stable and we recommend to update all productive
installations of Roundcube with this version. Download it from roundcube.net
[2].
Please do backup your data before updating.
We'd also like to thank Phil for his steady efforts to keep our website
up-to-date. Your work is much appreciated!
Best,
Thomas & Alec
[1] https://github.com/roundcube/roundcubemail/releases/tag/1.4.1
[2] https://roundcube.net/download
Dear subscribers
It's a big honor for me to announce the final release of the long awaited
major version 1.4 of Roundcube webmail.
After more than two years of hard work by Alec and other volunteer
contributors, Roundcube finally gets the responsive skin with full mobile
device support - the Elastic.
In addition to the new UI we introduce these new features:
* Email Resent (Bounce) feature
* Improved [Mailvelope](https://www.mailvelope.com) integration
* Support for Redis and Memcached cache
* Support for SMTPUTF8 and GSSAPI
Plus numerous improvements and bug fixes collected from your precious
feedback as well as updates to recent versions of 3rd party libraries like
jQuery and TinyMCE. See the full changelog in the release notes on the
Github download page [1].
The new Elastic theme, which is the new default skin, is built with LESS
and of course the sources are included. They allow a certain degree of
customization by adjusting some colors and variables using the
`_styles.less` and `_variables.less` files. Please consider customizing
your Roundcube installation in order to make phishing [2] harder. You'll
find guidance in the README.md file inside the skin folder.
This release is considered stable and we encourage you to update your
productive installations after carefully testing the upgrade scenario and
preparing your users to the significant changes in their webmail UI.
Download it from https://roundcube.net/download.
With the release of Roundcube 1.4.0, the previous stable release branches
1.3.x and 1.2.x will change into LTS low maintenance mode which means they
will only receive important security updates but no longer any regular
improvement updates. The 1.1.x series is no longer supported and maintained.
Kind regards,
Thomas
[1] https://github.com/roundcube/roundcubemail/releases/tag/1.4.0
[2] https://roundcube.net/news/2019/10/28/phishing-alert
Dear Roundcube vendors
We have been receiving many reports about phishing attempts appearing out
in the wild which are targeting end users of webmail services powered by
Roundcube. The fake emails pretend to come from „Roundcube Webmail“ or
alike and trick users to enter their email password on fake sites. The
attackers take advantage of the fact that most users think Roundcube is a
service like Gmail or Hotmail and aren’t aware who is actually running
their email: the individual hosting providers using the Roundcube software
for their webmail service.
Please act now:
* Customize your Roundcube installation with your individual logo [1] and
product name [2]. Make sure to configure the support_url [3] and provide
proper guidance for your existing and new users.
* Inform your users about the ongoing phishing attempts and make them aware
about who is responsible for the email system they are using every day.
There is no thing like a „Roundcube webmail service“.
* Secure your SMTP server to deny sending with arbitrary sender addresses.
This is a general suggestion but also helps avoiding fraudulent messages
being sent from your hosts.
Help us to fight phishing and protect your users!
Kind regards,
Thomas
[1]
https://github.com/roundcube/roundcubemail/blob/master/config/defaults.inc.…
[2]
https://github.com/roundcube/roundcubemail/blob/master/config/defaults.inc.…
[3]
https://github.com/roundcube/roundcubemail/blob/master/config/defaults.inc.…
Dear subscribers
We just published the long awaited second release candidate for the next
major version 1.4 of Roundcube webmail. Many fixes, improvements and final
touches have gone into this since the first release candidate was
published. Check the Changelog [1] for a complete list of changes.
We waited for some promised contributions which unfortunately never arrived
but we now feel confident to call the new Elastic skin complete and ready
to be officially released.
As we’re moving towards the final release, we strongly encourage everybody
to customize the Elastic skin using the _styles.less and _variables.less
files to blend into your corporate design. You’ll find guidance for
customization in the README.md file inside the skin folder.
Rolling out a new and significantly different user interface should be
carefully planned and we recommend to prepare your users for the change.
Therefore the Elastic theme is not set to be the default theme. Adjust your
config in order to enable it by default or let your users switch themselves
in the user settings.
Please note that the Classic skin will no longer be maintained and
completely removed in future releases. Within the 1.4 release series, the
Classic skin remains part of the package but it will not receive new
features that were added to the Larry or Elastic themes.
This is still a preview release and we recommend to test it on a separate
environment. And don’t forget to backup your data before installing it.
Download it from https://roundcube.net/download and keep on submitting bugs
and send us your feedback.
Best,
Alec & Thomas
[1] https://github.com/roundcube/roundcubemail/releases/tag/1.4-rc2
Dear subscribers
We proudly announce the next service release to update the stable version
1.3.
It contains fixes to several bugs backported from the master branch
including minor security fixes around CSS and HTML cleanup.
See the full changelog in the release notes on the Github download page [1].
This release is considered stable and we recommend to update all productive
installations of Roundcube with this version.
Download it from https://roundcube.net/download.
Best,
Alec & Thomas
[1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.10
Dear subscribers
We proudly announce the next service release to update the stable version 1.3.
It contains fixes to several bugs backported from the master branch.
See the full changelog in the release notes on the Github download page [1].
This release is considered stable and we recommend to update all productive installations
of Roundcube with this version.
Best,
Alec & Thomas
[1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.9
Dear subscribers
We just published a first release candidate for the next major version 1.4
which has now been in development for quite a while. Although the new
responsive Elastic skin is now functional and feature complete, it still
lacks the final brush-up to make it shine. We have now finally found a
volunteer to work on this and once completed, a second release candidate
will follow.
For now you’re all invited to give the new 1.4 version another test run.
Besides the responsive theme it comes with lots of new features and
improvements since the beta release. Check the Changelog [1] for a complete
list of changes.
Please also try customizing the Elastic skin using the _styles.less and
_variables.less files and let us know what’s missing.
You’ll find guidance in the README.md file inside the skin folder.
Because we don’t yet consider the Elastic theme fully complete, it’s not
set to be the default theme. Adjust your config in order to enable it with
$config['skin'] = 'elastic';
This is a beta release and we recommend to test it on a separate
environment.
And don’t forget to backup your data before installing it.
Download it from https://roundcube.net.
Cheers,
Thomas & Alec
[1] https://github.com/roundcube/roundcubemail/releases/tag/1.4-rc1
Dear subscribers
We proudly announce the next service release to update the stable version
1.3.
It contains fixes to several bugs backported from the master branch
including a security fix for a reported XSS vulnerability plus updates to
ensure compatibility with PHP 7.3 and recent versions of Courier-IMAP,
Dovecot and MySQL 8.
See the full changelog in the release notes on the Github download page [1].
This release is considered stable and we recommend to update all productive
installations of Roundcube with this version. Download it from
https://roundcube.net.
Best,
Alec & Thomas
[1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.8
Dear subscribers
We proudly announce the beta release of the next major version 1.4 of
Roundcube webmail.
With this milestone we introduce some new features:
* New responsive skin with mobile support
* Email Resent (Bounce) feature
* Improved Mailvelope integration
* Support for Redis cache
* Support for SMTPUTF8
See the full changelog in the release notes on the Github download page [1].
Thanks to the tremendous effort Alec has put into the new skin, we finally
managed solve the most urgent issue and make Roundcube accessible to the
growing number of mobile and tablet devices. We'd also like to thank Kolab
Systems for sponsoring some of Alec's working hours to the project.
Because the new responsive skin is not yet fully completed, it’s not
enabled by default. In order to make it the default for your users, change
your config.inc.php accordingly:
$config['skin'] = 'elastic';
As an alternative, the plugin elastic4mobile [2] makes it the default for
mobile devices while keeping the configured default for desktop browsers.
The Elastic skin is built with LESS and of course the sources are included.
They allow a certain degree of customization by adjusting some color
variables [3]. All you need is to compile your very own customized skin
with lessc.
This is a beta release and we recommend to test it on a separate
environment. And don’t forget to backup your data before installing it.
Download it from https://roundcube.net/download/#beta
Please report bugs to our Github issue tracker [4] and check for duplicates
before hitting the submit button.
== New Logo and Website Design ==
As you may have noticed, the appearance of the Roundcube website has
changed a while ago and it's also responsive now ;-)
Many thanks to Phil Weir for re-coding the entire website and submitting a
proper pull request!
The new Elastic skin also brings a reshaped logo which has now been added
to our website.
The new logo was kindly designed and contributed by DRU Design [5]. Kudos!
Kind regards,
Thomas
[1] https://github.com/roundcube/roundcubemail/releases/tag/1.4-beta
[2] https://plugins.roundcube.net/packages/roundcube/elastic4mobile
[3]
https://github.com/roundcube/roundcubemail/blob/master/skins/elastic/styles…
[4] https://github.com/roundcube/roundcubemail/issues
[5] https://github.com/drudesign