Dev

dev@lists.roundcube.net

4290 discussions

Published Updates 1.1.5 and 1.0.9
by Thomas Bruederli 20 Apr '16

20 Apr '16

Dear subscribers We just published updates to both stable versions 1.0 and 1.1 delivering important bug fixes and helps protecting Roundcube against more XSS and CSRF attacks. Version 1.1.5 also has two new plugin hooks integrated and version 1.0.9 comes with cherry-picked fixes from the more recent version to ensure proper long term support. See the full changelog in the wiki [1] and the selection for 1.0.9 on the release page [2]. Both versions are considered stable and we recommend to update all productive installations of Roundcube with either one of these versions. Download them from GitHub via https://roundcube.net/download. As usual, don’t forget to backup your data before updating! Best, Thomas [1] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115 [2] https://github.com/roundcube/roundcubemail/releases/tag/1.0.9

1 0

Release candidate for 1.2 out now
by Thomas Bruederli 13 Apr '16

13 Apr '16

Hello folks Roundcube 1.2 is pretty much complete and after adding some last-minute improvements we just published a release candidate to give it another round of testing before we slap the 'stable' tag on it. We hereby invite you all to test the release candidate and report remaining bugs to our issue tracker. The most important features we added in 1.2 are: * PHP7 compatibility * PGP encryption in two flavours * Improved security measures to protect from brute-force and CSRF attacks See the full Changelog in our wiki: https://github.com/roundcube/roundcubemail/wiki/Changelog Download the packages or the signed source directly from Github: https://github.com/roundcube/roundcubemail/releases/tag/1.2-rc Please note that we recommend to test it on a separate environment. And don't forget to backup your data before installing it. Another note: with the upcoming stable release of 1.2.0 the old 1.0.x and the 1.1.x series will only receive important security fixes. Updates to these two branches are to be released soon. So stay tuned! Best, Thomas

1 0

Say goodbye to Trac
by Thomas Bruederli 01 Apr '16

01 Apr '16

Hello devs and list lurkers You all might have noticed the hickups we recently had with our Trac platform. Our Trac site was under heavy attack from spammers which put high load on the system and flooded the database with garbage. None of us really is a Trac expert and we failed at bringing the necessary measures in place to fight the spamming an to clean up the mess they caused. Adam, our volunteer admin who donated his private server for hosting the Trac site wants to resign from his duties which is fair and understandable. As a first action we deactivated user registration while we're looking for alternatives. That said, we're now looking at possible replacements for Trac or a successor for Adam who is willing to take the burden of hosting that crap. The most obvious - and already often requested - option is to migrate the tickets and the wiki pages into github. I already tested the import through the github API and that's a feasible option. But of course there are downsides: issue IDs cannot be kept and would be re-assigned. Also one cannot add tickets and comments with a date in the past. >From the 6.5K tickets we have in the database, there are ~ 200 open. I guess migrating these plus the resolved ones back to milestone 1.0.0 into github issues would give us a clean restart without loosing to much valuable data and - most importantly - without having to setup, host and protect our own tracker system. Anyway, please raise your voice with suggestions, concerns or offers if you have experience with such a post-Trac situation. Many thanks, Thomas

10 11

Can you please build a roundcube mail app for Android?
by Maureen Electa Monte 30 Mar '16

30 Mar '16

I had an app that wasn't by you that didn't work very well. I read that I'm supposed to use the browser and the user interface is impossible to navigate once I log in. Are there options you recommend for people like me who want to use my smart phone to access my email? Please advise, and thank you very much for your time. -- Maureen Electa Monte Success Architect | Building Winning Teams Ideation ~ Strategic ~ Learner ~ Achiever ~ Individualization ~ Maximizer c) 248.821.6821 Learn about Strengths-Based Success at www.maureenmonte.com

2 2

Trac platform migrated to Github
by Thomas Bruederli 20 Mar '16

20 Mar '16

Dear subscribers After many ups and downs with our Trac platform which hosted our wiki and the ticket system for years now, we finally migrated the data over to Github where we already host the git repositories. Therefore, on March 25th 2016 the trac.roundcube.net site will be shut down Starting today, the site is in read-only mode meaning that user logins and ticket reporting have been disabled already. This means that submitting new tickets now goes through Github and so does the roadmap planning and overview. The entry point for that is our Github project page at https://github.com/roundcube/roundcubemail Today we just migrated 4.8K tickets from the Trac database to Github issues [1], leaving the invalid and duplicate ones behind. Unfortunately the ticket numbers could not be kept and have all been re-assigned. The original trac ticket numbers are mentioned in the migrated issue body and can be used for searching. We'll also install a redirect service which will translate old Trac urls to the corresponding issue pages. The wiki will also be translated into Github markdown pages. There's some manual reviewing involved in order to update or remove outdated information during this process. Please give us some more days to complete that task. Thank you for your understanding and see you on Github Best, Thomas [1] https://github.com/roundcube/roundcubemail/issues

1 0

bug in CC-input-field 1.1.4
by Pascal Nobus 14 Mar '16

14 Mar '16

If you type this in the CC-input field: "Your Name (your(a)email.com)" <your(a)email.com> you will endup with a bounce. It seems roundcube is seeing the values between the " as an emailadress. Reprodruce this error: Typ in the CC-field: "Your Name (your(a)email1.com)" <your(a)email2.com> And you'll get an error about email1.com P.S. I tried to put this in the TRAC-system, but couldn't create a login. Best regards, Pascal Nobus -- www.webservice.be

2 1

RC 1.2 beta status
by fsantiago＠garbage-juice.com 13 Mar '16

13 Mar '16

Where do we stand with this beta?

2 1

Re: [RCD] [RCU] Error "Invalid request! No data was saved."
by Michael Heydekamp 11 Mar '16

11 Mar '16

Am 08.03.2016 15:05, schrieb Michael Heydekamp: > Am 24.09.2015 09:16, schrieb A.L.E.C: >> On 09/23/2015 10:53 PM, Michael Heydekamp wrote: >>> But I'm hoping that one of the devs will shed some light on it, as to when >>> this error will occur. I'm seeing it for a few weeks now. >> >> "Invalid request! No data was saved" indicates CSRF security token check >> fails. Something is wrong with session or something (proxy?) removes >> X-Roundcube-Request header (or less likely POST parameter). >> >> Test with disabled all plugins and use most recent stable version. > > I didn't have the time and opportunity to investigate this further, so the > problem did persist for approx. half a year now - and since a few days, all > of a sudden it is gone. > > As we didn't change anything at our end - did you do anything which could > have solved the issue...? > > I had the issue always when I logged in a second time but with a different > (sub-)domain. The first attempt of the second login failed with "Invalid > request!", the second attempt then worked. And now the problem is back again. :( What the heck can be the reason? Any hint appreciated. Now sent to the dev-list, as no response in the users-list. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

1 0

gpg compatibility issues
by devotedmystic . 19 Feb '16

19 Feb '16

Today I tested more extensively the latest gpg protocol modifications. To my surprise, while before everything seemed to work, I found new combinations that do not work. Now the gpg module seems more sensitive to its own protocol, but cannot decrypt successfully mail sent from other clients that it could do before. Example: The following html mail asks for a decryption password, then displays this message, "This is an encrypted message and can not be displayed. Sorry!". The protocol is only slightly different from Enigma generated mails. (HEADER) X-Gpgit-Executed: True Content-Type: multipart/encrypted; boundary="----------=_1455832935-3072-0"; protocol="application/pgp-encrypted" This is a multi-part message in MIME format... ------------=_1455832935-3072-0 Content-Type: application/pgp-encrypted; name="msg.asc" Content-Disposition: inline; filename="msg.asc" Content-Transfer-Encoding: 7bit Version: 1 ------------=_1455832935-3072-0 Content-Type: application/octet-stream Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP MESSAGE----- Version: GnuPG v1 hQIMAxynbkzvSQ0KAQ/+IBYjOaa+S8vmLLUtlBNnc/Sxy/AWSJvH0tI86fCs5VhR EhYOpG4NGYH80jOrkwftWppEM2sll4xsvy/yZmRjdp88pHBsPEKy/vBm4w6NzsRT t0PpzwtiQ4z3+6qWmMGDFPHO54oDgEqCY7NoUk4e9lNYaeUNFNHoRB6+pV81cRAX rNj6R8Z5ROkO28dOxBICNBZ0s1qYlZ0fRKCe8SUK2ikCnZKYk7dLzb+gU+tDGmMY KZM7MAjHr+XHHN2scj5w8FhbFQZGOiIHAAOiCMAxhaxcPwYS9kOggr9d3uNvjn9X axDAWFopFDUbiBW2OrVA4WZfsbsCd9gncBHnK+mEmqkmnGuktrxsmU7WjX/D4Vqy //zvzaS+lJIi/gqIG+YkTzZzgSt34S6KlAmN1V3V+toHExDxfIj/cV507zKcAItm u6rojJzNsfyfhIRgkUDkvuL1LBgm6raCsXAJiwXszUzzcFYtPRCKTc+yZQUGCbhl cDLl9+JbGd8a4hriMLcsXBuO21ledawLSYNfFYTxX7aNLLQYC5qLad94zmOmWP4Z 0pSMex0erjLo0TSv9vMLqbJv8D3E+VOctq5/0wkVTcJhq5vRWI+6NxDDv5d/BuON SOivigBNLBPcSMOJ7+zjP5OZ2r9uvuNUSGe9lZz/DsYWIu71eOm5LivCjXvhWaDS wA0B4CdjKEVWcKsHd5vpVfU6omEcHhvRpbn+g9pXsRTJaXWp0u6LksfrzuAiy3je 704pYdvZZkANBQ6ipLZUPO0ca/QJWNUqQ3V2ZxkGRY2WmpPtyG6aNVKeH06VTSGW +TdrX9v6NJzAC1LUHqXzo1I28oQwU9QajP9k4jtXh+B7WrdImERl8rgNPSUpsP/m UQO8m3wvBKdysxER2uwdouzufPtYU34LckvsSnj/oStiVKmNfUNwm6I6Sfpw2qNa +3jj5Lz1jx3JxkHa1YVT =rLn8 -----END PGP MESSAGE----- ------------=_1455832935-3072-0--

1 2

Re: [RCD] [Roundcube Webmail] #1490633: Enigma: Mail containing text + PGP encrypted part is not decrypted (was: Mail containing text + PGP encrypted part is not decrypted)
by devotedmystic . 28 Jan '16

28 Jan '16

I experimented with this as I added to enigma_engine.php self-encryption, if no valid key was found for the receiver. So, I appended a message before the encrypted message, saying that, if he cannot read it (because he does not have the pgp key), he can click on a link which would decrypt the message, if he knows the password. Now my sieve configuration broke and I am unable to test until I fix it again. But I saw that enigma was behaving correctly. The message was displayed before the decryption password was entered, followed by the ---PGP PART---. Once the password was entered, the message of course disappeared. Same behavior in enigmail. For my use, I would mark this as resolved. If there is some other use, I don't know. On Wed, Jan 27, 2016 at 10:00 AM, Roundcube Webmail <trac(a)roundcube.net> wrote: > #1490633: Enigma: Mail containing text + PGP encrypted part is not > decrypted > ---------------------------+----------------------- > Reporter: devotedmystic | Owner: > Type: Bugs | Status: new > Priority: 3 | Milestone: 1.2-RC > Component: Plugins | Version: 1.2-beta > Severity: major | Resolution: > Keywords: | > ---------------------------+----------------------- > \ > \ > \ > \ > \ > \ > > Comment (by alec): > > I couldn't find any standard for this, but e.g. Enigmail can handle such > messages (with warning that only part of the body was encrypted). So, we > should support this too, I suppose. > \ > \ > \ > > -- > Ticket URL: <http://trac.roundcube.net/ticket/1490633#comment:4> > Roundcube Webmail <http://www.roundcube.net/> > Roundcube Webmail is a browser-based multilingual IMAP client with an > application-like user interface. It provides full functionality you expect > from an e-mail client, including MIME support, address book, spell > checking, folder manipulation and plugins. Roundcube Webmail is written in > PHP and requires a MySQL, Postgres, MSSql or SQlite database. The user > interface is fully skinnable using HTML and CSS. >

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev