Dev October 2015

dev@lists.roundcube.net

6 participants
6 discussions

svn.roundcube.net
by Scott Kidder 21 Jan '16

21 Jan '16

A user on the forums has pointed out to me that http://svn.roundcube.net/ is now loading a medical group site. I'm guessing this isn't correct and should be fixed. Thanks, -Scott Kidder

5 5

Cryptographic signatures for release tags or tarballs
by Guilhem Moulin 02 Jan '16

02 Jan '16

Hi there, Your download page lists the SHA256 checksums of the tarballs to let users verify the integrity of the downloaded file(s). To address a different threat model and offer integrity verification of cryptographic quality [0], please also consider signing your git tags (with ‘git tag --sign’), and/or provide detached cryptographic signatures for the future release tarballs. As far as Debian is concerned a detached OpenPGP signature would be preferable since our packaging tools can automatically download tarballs and cryptographically verify their integrity in one go. Assuming you have an OpenPGP key [1], an ASCII armored (.asc) detached signature can be generated with gpg --armor --detach-sign /path/to/roundcubemail-x.y.z.tar.gz Completely unrelated, please note that the “1.1.3 — Dependent” tarball includes moxieplayer.swf, while the last mention of moxieplayer in your changelog says “TinyMCE security issue: removed moxieplayer (embedding flv and mp4 is not supported anymore)”. Was it re-added by mistake? (Anyway that file is violates the DFSG and will be removed from the upcoming 1.1.3 Debian packages.) Thanks! Cheers, -- Guilhem. [0] Fair enough, your checksums are delivered over HTTPS. But an attacker breaking into your web server could fool us all. On the other hand cryptographic signatures raise the bar by far (assuming they are generated on the devs' platform). Furthermore OpenPGP is independent (and orthogonal) to the X.509 PKI in general, and to the CA cartel in particular, hence address a different threat model. [1] Otherwise there are numerous tutorials available online. The Debian project has its own on http://keyring.debian.org/creating-key.html .

3 3

Roundcube and accessibility for users of screen reading software
by David Mehler 03 Nov '15

03 Nov '15

Hello, My name is Dave. I'm a blind System Administrator. I have recently set up two email servers, one for personal the other for job-related use. I am currently evaluating webmail clients for accessibility support to be used by users of screen readers. I was wondering where Roundcube was at in terms of supporting the latest accessibility standards and if there was any way I could assist? Thanks. Dave.

3 2

Mails not loading anymore in 1.2-git
by Michael Heydekamp 30 Oct '15

30 Oct '15

Hello, all of a sudden I can't open a large number of messages with the current 1.2-git anymore. In some folders I can open a few messages, in some folders (e.g. the folder for this dev-list) I can't open almost any messages. I'm just seeing the "Loading..." message at the top forever. I can't detect any consistency, be it the format of the message, the size or anything else. All messages can be loaded with the current stable version with no problem. Nonetheless I'd be grateful for a fix, as the git version is my productive one. ;) Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

3 4

Roundcube Sessions
by Andrea Brancatelli 15 Oct '15

15 Oct '15

Hello, from time to time we're getting this error in the logs: [15-Oct-2015 11:36:05 +0200]: <gmb908g2> DB Error: [1062] Duplicate entry 'gmb908g2bks41hqcmd8u7ksnj0' for key 'PRIMARY' (SQL Query: INSERT INTO `session` (`sess_id`, `vars`, `ip`, `created`, `changed`) VALUES ('gmb908g2bks41hqcmd8u7ksnj0', '[....cut..cut..cut....]'); I don't exactly get why this is happening (if you have any suggestion on this you're highly welcome) but I was wondering why not using a REPLACE INTO instead of an INSERT INTO since you're working with an explicit primary key. Thanks :) -- Andrea Brancatelli Schema31 S.p.a. Responsabile IT ROMA - FIRENZE - PALERMO ITALY Tel: +39. 06.98.358.472 Cell: +39 331.2488468 Fax: +39. 055.71.880.466 Società del Gruppo SC31 ITALIA

1 0

A new blog about Roundcube
by A.L.E.C 09 Oct '15

09 Oct '15

... and Kolab. I just started and will see how it goes. I'll focus on new features in Roundcube and other Kolab components. There are already 3 small articles. Have a good reading ;) http://kolabian.wordpress.com/ -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev October 2015