Dev

dev@lists.roundcube.net

4304 discussions

Security updates 0.9.5 and 0.8.7
by Thomas Bruederli 21 Oct '13

21 Oct '13

Dear Roundcube users We just published new releases which fix a recently reported vulnerability that allows an attacker to overwrite configuration settings using user preferences. This can result in random file access, manipulated SQL queries and even code execution. The latter one only affects versions 0.8.6 and older. Beside the security fix, the 0.9.5 release also includes other minor bug fixes and improvements. Most notably it brings the default spell checker back after Google suspended their public spell checking service. Please update your installations with the new versions or patch them with the fixes listed below for the various older versions of Roundcube. Download the new versions from http://roundcube.net/download Patch for 0.9.x: https://github.com/roundcube/roundcubemail/commit/4109bb26ce.diff Patch for 0.8.x: https://github.com/roundcube/roundcubemail/commit/eb433aa33c.diff Patch for 0.7.x: https://github.com/roundcube/roundcubemail/commit/1972037274.diff More information about the vulnerability will be published under CVE-2013-6172. Kind regards, Thomas

1 0

identity_select hook for 0.9.4
by Michael Heydekamp 17 Oct '13

17 Oct '13

Hi Alec, would it be a big deal to make the identity_select hook available for 0.9.4, too? Looking at the commit and as the plugin itself does exist already, this would be only 5 lines of new/changed code. I could try to do this myself, but we would then run into possible merge conflicts at our daily git-pull. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

2 3

Reply-To header in SVN list messages
by Michael Heydekamp 16 Oct '13

16 Oct '13

Currently the messages in the SVN list have these addresses in the Reply-To header: ------------------------------------------------------ > svn(a)lists.roundcube.net, GitHub <noreply(a)github.com> ------------------------------------------------------ To have a "noreply" address in the Reply-To does not make any sense by definition. And any reply to svn(a)lists.roundcube.net will never make it to this R/O list anyway. So wouldn't it be better to set the Reply-To to the dev-list...? Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

1 0

Re: [RCD] [Svn] [roundcube/roundcubemail] acbf6e: Fix address matching in Return-Path header on identity selection (#1489374)
by Michael Heydekamp 16 Oct '13

16 Oct '13

Confirmed, thanks! -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany Am 15.10.2013 18:53, schrieb GitHub: > Branch: refs/heads/release-0.9 > Home: https://github.com/roundcube/roundcubemail > Commit: acbf6eede613a5496cabccbdbfcb2f4e2cbd60d2 > > https://github.com/roundcube/roundcubemail/commit/acbf6eede613a5496cabccbdb… > Author: Aleksander Machniak <alec(a)alec.pl> > Date: 2013-10-15 (Tue, 15 Oct 2013) > > Changed paths: > M CHANGELOG > M program/steps/mail/func.inc > M tests/MailFunc.php > > Log Message: > ----------- > Fix address matching in Return-Path header on identity selection (#1489374) > > Conflicts: > > CHANGELOG > > > > > _______________________________________________ > Roundcube SVN commits mailing list > svn(a)lists.roundcube.net > http://lists.roundcube.net/mailman/listinfo/svn

1 0

Identity selection broken? (was: [Svn] [roundcube/roundcubemail] acbf6e: Fix address matching in Return-Path header on identity selection (#1489374))
by Michael Heydekamp 16 Oct '13

16 Oct '13

Identity selection appears to be completely broken (I assume due to the commit below). The default identity is being selected always, but even that doesn't work correctly: The signature is not being loaded into the editor. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany Am 15.10.2013 18:53, schrieb GitHub: > Branch: refs/heads/release-0.9 > Home: https://github.com/roundcube/roundcubemail > Commit: acbf6eede613a5496cabccbdbfcb2f4e2cbd60d2 > > https://github.com/roundcube/roundcubemail/commit/acbf6eede613a5496cabccbdb… > Author: Aleksander Machniak <alec(a)alec.pl> > Date: 2013-10-15 (Tue, 15 Oct 2013) > > Changed paths: > M CHANGELOG > M program/steps/mail/func.inc > M tests/MailFunc.php > > Log Message: > ----------- > Fix address matching in Return-Path header on identity selection (#1489374) > > Conflicts: > > CHANGELOG > > > > > _______________________________________________ > Roundcube SVN commits mailing list > svn(a)lists.roundcube.net > http://lists.roundcube.net/mailman/listinfo/svn

4 12

mail_host
by Cor Bosman 16 Oct '13

16 Oct '13

Hey all, I know in the past there has been some discussion about the need for mail_host. In our specific setup mail_host is really a huge pita. For example, we allow customer service employees to impersonate a customer. This is done through a specific imap server that allows impersonation. But this doesn't work, because roundcube will create a new config entry in the database because the imap server changed. Even though from our point of view, the imap servers deal with the same user base. Wouldn't it be possible to have a config option $config['mail_host'] = false; if you set this to a specific mail_host, the mail_host column is always set to that config option. If thats a 'wont fix' from roundcube, is there a way this could be done through a plugin? Cor

2 1

latest git issues
by Cor Bosman 15 Oct '13

15 Oct '13

Hey all, im seeing some problems in the latest git. One can be seen here: http://grab.by/rb1A The language im using is not Albanian :) Actually, it seems like maybe there are more settings problems. Maybe related, this isnt being remembered consistently: http://grab.by/rb1A Cor

1 2

Glitch in identity selection (was: [Svn] [roundcube/roundcubemail] b825f8: Move identity selection based on non-standard headers into (new) identity_select plugin (#1488553))
by Michael Heydekamp 14 Oct '13

14 Oct '13

Being on vacation, I finally find the time to play with the new identity_select plugin. Works pretty well so far, but I may have found a small glitch: For testing purposes, I have created the following identities: -------------------- > identity01(a)test.de > identity02(a)test.de > identity03(a)test.de > bla(a)test.de > blubb(a)test.de -------------------- The config entry in config.inc.php is: ---------------------------------------------------------------------------- > $config['identity_select_headers'] = array('x-envelope-to', 'envelope-to', 'delivered-to'); ---------------------------------------------------------------------------- Then I create a reply to the message attached. The identity being chosen by RC is - much to my surprise - "bla(a)test.de". Although none of the headers does contain this identity at all. There are four headers containing the string "not_bla(a)test.de", of course, but this is anything but identical to "bla(a)test.de". Something is going wrong in terms of string comparison here. Any other tests did produce correct results so far (I'm not finished yet with testing, though). Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany Am 04.08.2013 10:41, schrieb GitHub: > Branch: refs/heads/master > Home: https://github.com/roundcube/roundcubemail > Commit: b825f86108a91957f6467176e418cfc257874658 > > https://github.com/roundcube/roundcubemail/commit/b825f86108a91957f6467176e… > Author: Aleksander Machniak <alec(a)alec.pl> > Date: 2013-08-04 (Sun, 04 Aug 2013) > > Changed paths: > M CHANGELOG > A plugins/identity_select/identity_select.php > A plugins/identity_select/package.xml > A plugins/identity_select/tests/IdentitySelect.php > M program/lib/Roundcube/rcube_storage.php > M program/steps/mail/func.inc > > Log Message: > ----------- > Move identity selection based on non-standard headers into (new) identity_select plugin (#1488553) > > > > > _______________________________________________ > Roundcube SVN commits mailing list > svn(a)lists.roundcube.net > http://lists.roundcube.net/mailman/listinfo/svn

2 9

Cursor-up in Editor occasionally not working
by Michael Heydekamp 14 Oct '13

14 Oct '13

I'm currently working on a Win7/32 Home Premium machine with IE9 and RC 1.0-git. First I thought the Cursor-up key of the keyboard is defective, but then I realized that it's working fine anywhere else - except in the message editor of Roundcube while composing a message. It moves the cursor either just one line up or even no line up. It also depends if you are in a text block preceded with a quote char ">", or in an empty line, or in a "normal" (not quoted) text block. Has anybody else encountered such a behaviour already? Afterwards I realized that upon composing the next message, the key is working fine again in the message editor of Roundcube. So this behaviour is not consistent, and unfortunately I wasn't able to find a replicable scenario yet. :( But I have encountered it more than once already, so there must be one. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

1 1

Re: [RCD] Can't switch between HTML and text part - why?
by A.L.E.C 13 Oct '13

13 Oct '13

On 10/13/2013 05:22 PM, Michael Heydekamp wrote: > the message I'm replying to (.eml source attached) has a text/plain and a > text/html part. Normally RC should offer me the toggle to display either the > HTML or the text part - but due to some reason it doesn't. > > Ticket needed...? It's because it's multipart/alternative inside multipart/signed. Create a ticket, please. -- Aleksander 'A.L.E.C' Machniak LAN Management System Developer [http://lms.org.pl] Roundcube Webmail Developer [http://roundcube.net] --------------------------------------------------- PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev