Announce

announce@lists.roundcube.net

146 discussions

Update 0.9.3 released
by Thomas Bruederli 21 Aug '13

21 Aug '13

Hello folks We can proudly announce the third service release for the stable 0.9 series of Roundcube webmail. It fixes 25 more bugs including two recently reported XSS vulnerabilities with HTML messages and signatures. Along with that, we also optimized the UI behavior for touch devices to make Roundcube work nice and smoothly on tablets running iOS or Android. It's considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from http://roundcube.net/download, see the full changelog here:http://trac.roundcube.net/wiki/Changelog Kind regards, Thomas

1 0

Update 0.9.2 released
by Thomas Bruederli 16 Jun '13

16 Jun '13

Hello folks We're proud to announce the second service release for the 0.9 series of Roundcube webmail. It contains 25 bug fixes and improvements as well as some translation updates for Estonian, Romanian Finnish and French. It's considered stable and we recommend to update all productive installations of Roundcube with this version. As usual, download it from http://roundcube.net/download, see the full changelog here: http://trac.roundcube.net/wiki/Changelog Have fun! Thomas

1 0

Update 0.9.1 released
by Thomas Bruederli 17 May '13

17 May '13

Hello folks We proudly announce the first service release for the 0.9 series of Roundcube. As usual, it contains some bug fixes and improvements which didn't make it into the first stable version as well as some translation updates. After getting reports that some skin images weren't reloaded due to progressive cache settings, the packaged version now comes with unique urls of skin images referenced by templates and CSS files. If you're pulling the source directly from git you can achieve the same by running bin/updatecss.sh It's considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from http://roundcube.net/download, see the full changelog here: http://trac.roundcube.net/wiki/Changelog Have fun! Thomas

1 0

Stable version 0.9.0 released
by Thomas Bruederli 16 Apr '13

16 Apr '13

Hello folks We can proudly announce the next stable release of Roundcube. This version enhances the webmail experience with these new features: * Improved rendering of forwarded and attached messages * Optionally display and compose email messages a new windows * Unified UI for message view and composition * Show sender photos from contacts in email view * Render thumbnails for image attachments * Download all attachments as zip archive (using the zipdownload plugin) * Forward multiple emails as attachments * CSV import for contacts The major change of this version isn't really visible to the users but even more important for the developers: the Roundcube framework. We decoupled the core functions for IMAP access, SMTP email sending, database abstraction, caching, etc. from the webmail application in order to make them usable for other free software products. Another major change since the 0.8 series is the new database abstraction layer. In order to add support for SQLite3, the PEAR:MDB2 dependency was dropped and Roundcube now uses the native PHP Data Objects (PDO). It's enabled by default since PHP 5.1 and is considered stable and well-developed. One drawback, however, is a small lack in the MySQL PDO driver which makes PHP 5.3 a requirement for this version of Roundcube when using the MySQL database. A minor but rather handy improvement is a complete new database update mechanism that makes schema changes much easier to be deployed. After the upgrade, simply run bin/updatedb.sh to apply the necessary changes to the database Roundcube connects to. In case you used bin/installto.sh to perform the update, the schema upgrades are done applied and no further actions are required. After lots of testing and collecting your feedback, this version is considered stable and it also includes the recently discovered vulnerability that allows an attacker to modify its users preferences in a way that he can then read arbitrary files from the server. We therefore recommend to update all productive installations of Roundcube. Download both the webmail and the framework packages from http://roundcube.net/download Read the full list of changes here: http://trac.roundcube.net/wiki/Changelog IMPORTANT: We're still getting a lot of support requests from users who are under the impression that Roundcube is a public service such as Gmail or Hotmail. Unfortunately we cannot help these people and thus we'd like to encourage everybody once more to enter an URL to the option named 'support_url' in the Roundcube config. This will be display a link on all screens including the login page that should guide your users to instructions how to get help for your specific email service that uses Roundcube. Thanks a lot for using Roundcube and for your support! Best, Thomas

1 0

Security updates 0.8.6 and 0.7.3 for save-pref vulnerability
by Thomas Bruederli 28 Mar '13

28 Mar '13

After getting reports about a possible vulnerability of Roundcube which allows an attacker to modify its users preferences in a way that he/she can then read files from the server, we now published updated packages as well as patches that fix this security issue. Please update all your Roundcube installations with the new versions (0.9-rc2, 0.8.6, 0.7.4) or patch them with the published patches. Download the latest version from http://roundcube.net/download Patch for 0.9.x: http://ow.ly/jtQD0 Patch for 0.8.x: http://ow.ly/jtQHM Patch for 0.7.x: http://ow.ly/jtQK0 Patch for 0.6: http://ow.ly/jtQNd In order to find out whether one of your users has vulnerable preferences, you can run the following query on the Roundcube user database: SELECT * FROM users WHERE preferences LIKE '%generic_message_footer%' If this returns any results, you should at least clear the 'preferences' field of that user entry. Or better: entirely block the user because he or she most likely tried to exploit your system. And here's some background about the vulnerability: http://lists.roundcube.net/pipermail/dev/2013-March/022328.html Best regards, Thomas

1 0

Release candidate for version 0.9
by Thomas Bruederli 02 Mar '13

02 Mar '13

Hello all, We just published the feature-complete release candidate for the upcoming version 0.9. After adding some neat new features in 0.9-beta we now stabilized the code for the final release. Read http://trac.roundcube.net/wiki/Changelog for details. Download it from http://roundcube.net/download and update your testing systems. Use either the installto.sh or update.sh scripts to do the update as described in the UPGRADING instructions. These will take advantage of the new database schema upgrade mechanism we just added. That should make it easier and safer to keep the local database schema up-to-date with the new versions. And please report remaining bugs to our bug tracker. Best regards, Thomas

1 0

Release 0.9-beta ready for download
by Thomas Bruederli 08 Jan '13

08 Jan '13

Dear friends of Roundcube We're proud to announce the beta release of the next major version 0.9. With this milestone we introduce some important changes under the hood as well as some nice and long-awaited features: * First of all, the Roundcube Framework. The core classes providing the strong base of Roundcube's functionality have been extracted and decoupled into a Framework package. They can be used individually in other open source projects looking for solid functionality around IMAP, SMTP, MIME-handling and more. * Another major change is the new database abstraction. In order to add support for SQLite3 the PEAR:MDB2 dependency was dropped and Roundcube now uses the native PHP Data Objects (PDO). ATTENTION: due a small lack in the MySQL PDO driver, this version of Roundcube requires PHP 5.3 when using the MySQL database. * Finally we also added some new features: - Download all attachments as zip archive (zip module required) - Render thumbnails for image attachments (imagemagick is recommended) - Compose and mail view in new windows (configurable in user settings) - Upload attachment files and contact photos with drag & drop - Forward multiple emails as attachments - Show contact photos in mail view - CSV import for contacts And of course plenty of small improvements and bug fixes. See the complete Changelog at http://trac.roundcube.net/wiki/Changelog and download the new packages from http://roundcube.net/download. Please note that this is still a beta release and we recommend to test it on a separate environment. And don't forget to backup your data before installing. Have fun and let us know how the new Roundcube performs in your environment. Cheers, Thomas P.S. We're still looking for volunteers helping us to keep the translations of the Roundcube UI up-to-date. To make it even easier for you, we recently moved to Transifex. Visit our project at https://www.transifex.com/projects/p/roundcube-webmail/ and join our translation teams.

1 0

Moving translations from launchpad to Transifex
by Thomas Bruederli 02 Jan '13

02 Jan '13

Hello folks! First of all, happy new year and best wishes for 2013! I'd like to inform you that we now decided to switch from launchpad to Transifex to maintain the translations for Roundcube. The Transifex platform seems to be very solid and well-developed whereas launchpad had some serious issues which you also might have experienced. Transifex offers native support for our translation files as well as a very handy API and command line tools. That'll make it easier for us to seamlessly synchronize precious work from your translators back into the Roundcube source repository and finally publishing it. For this and many other reasons we now decided to make Transifex our new and official translation system. I know, this isn't very nice for those, who we made registering accounts on launchpad not so long ago and now we're asking you to register at yet another platform just to follow us. I admit, launchpad was a mistake and we'd like to correct this mistake rather soon. You can find Roundcube on Transifex.com at https://www.transifex.com/projects/p/roundcube-webmail. For quality reasons it is set to limited access which means that translators have to apply to become part of a translation team before they can actually start translating. So if you're interested in becoming a member for a certain language team, choose the language from the list and then click on "Join team" on the upper right part of the overview page. We promise to process your requests as fast as possible. Many thanks for all your support and we hope you'll help us to keep the Roundcube localizations up-to-date. Best regards, Thomas

1 0

Update 0.8.4 is out
by Thomas Bruederli 15 Nov '12

15 Nov '12

Dear Roundcube lovers, We just published new packages for Roundcube webmail. This service update mainly fixes the nasty bug which sneaked into the last 0.8.3 release. In addition to that, we also packed some more fixes into this release, one of them a recently reported XSS vulnerability. The buggy previous version makes the compose screen to randomly reload itself which may result in a loss of the unsent message. So if you already installed 0.8.3, please immediately update your installation with this new version. Download it from http://roundcube.net/download We apologize for the inconvenience with the previous release! Best, Thomas

1 0

Patch for 0.8.3, new release is coming soon
by Thomas Bruederli 14 Nov '12

14 Nov '12

Hello folks, We kind of made it a tradition in Roundcube to add some nasty bugs with every second release we publish :-) This time a pull request accidentally was merged into the release branch instead of git-master where we usually do the testing. The effect of this bug is the compose screen randomly reloading and likely loosing the contents you're writing. There's a patch you can download [1] and apply to any 0.8.3 installation. And a new release will follow later this week. We'd like to apologize for this inconvenience! Best, Thomas [1] http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.8.3/rou…

1 1

← Newer
1
...
6
7
8
9
10
11
12
...
15
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

Announce