Users March 2017

users@lists.roundcube.net

10 participants
7 discussions

Security updates for LTS version 1.0.x
by Security 31 Mar '17

31 Mar '17

Hello, will there be a security update for the vulnerability CVE-2017-6820 (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6820)? The roundcube web page announces a "low maintenance" support of version 1.0.x. As far as I know this version isn't officially discontinued and not out of support, is it? Thanks in advance, Rainer

2 1

drag & drop not working as expected
by lutz.niederer＠gmx.net 28 Mar '17

28 Mar '17

2 1

Special IMAP Folders "Sent vs. sent-mail"
by plataleas 16 Mar '17

16 Mar '17

hi all clarification for special IMAP folder Sent is needed. - We have user(a)test.com with the following initial IMAP folders: /#doveadm mailbox list -u user(a)test.com// //INBOX// //INBOX.Trash// //INBOX.Sent/ - The user(a)test.com logins to roundcube. /#doveadm mailbox list -u user(a)test.com INBOX INBOX.Trash INBOX.Sent/ - The user(a)test.com is composing an Email (without sending the email). /#doveadm mailbox list -u user(a)test.com/ /INBOX/ /INBOX.Trash/ /INBOX.Sent/ /*INBOX.sent-mail*/ We would expect that rc is using the sent_mbox folder called "Sent" for storing Sent Mails: /#grep sent_mbox /etc/roundcube/defaults.inc.php // //$config['sent_mbox'] =*'Sent';*/ Is this a configuration issue? How do we tell rc to use the existing mailbox INBOX.Sent ? Thanks for clarification plataleas

1 0

Attempt to update plugins failed: Authentication required (git.kolab.org)
by deoren 14 Mar '17

14 Mar '17

I updated the plugins using composer fine on Sunday when upgrading to 1.1.8, but now that I've attempted an upgrade from 1.2.4 I receive this error: Could not load Structures_Form 0.8.0devel: Invalid version string "0.8.0devel" Could not load Structures_Form_Gtk2 0.8.0devel: Invalid version string "0.8.0devel" Could not load Structures_DataGrid_DataSource_PDO 0.1.1dev1: Invalid version string "0.1.1dev1" Could not load Text_PathNavigator 0.1.0dev2: Invalid version string "0.1.0dev2" Could not load Text_PathNavigator 0.1.0dev1: Invalid version string "0.1.0dev1" Could not load Services_Pingback 0.2.0dev2: Invalid Authentication required (git.kolab.org): Username: Password: Failed to update https://git.kolab.org/diffusion/PNL/php-net_ldap.git,Updating dependencies (including require-dev) Attempts to visit the https://git.kolab.org/diffusion/PNL/php-net_ldap.git URL directly in a browser yesterday resulted in a 503 error. If I try now, I'm redirected to a Phabricator login page. Is this a known issue? Thanks in advance for your feedback.

1 0

Updates 1.2.4 and 1.1.8 released
by Thomas Bruederli 11 Mar '17

11 Mar '17

Dear subscribers We just published another update to both stable versions 1.2 and 1.1 delivering important bug fixes and improvements which we picked from the upstream branch. Included is a fix for a recently reported XSS vulnerability within CSS styles inside an SVG tag. See the full changelog for 1.2.4 in the wiki [1] and for version 1.1.8 in the release notes [2]. Both versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. Download them from GitHub via https://roundcube.net/download. As usual, don't forget to backup your data before updating! Best, Thomas [1] https://github.com/roundcube/roundcubemail/wiki/Changelog#release-123 [2] https://github.com/roundcube/roundcubemail/releases/tag/1.1.8

1 0

Help with Apache rewriterule to force roundcube to use https
by Robert Moskowitz 10 Mar '17

10 Mar '17

I am working on Centos7 which provides roundcubemail 1.1.7 and Apache 2.4. My current server is Redsleeve6 (Centos6 for armv7) which I installed roundcubemail 1.0.4. With help here 4 years ago I developed a rewrite rule: <VirtualHost *:80> ServerName webmail.test.htt-consult.com ServerAlias webmail RewriteEngine On RewriteCond %{SERVER_PORT} !^443$ RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R] ExpiresDefault "access plus 10 years" AddOutputFilterByType DEFLATE text/html text/plain text/xml php_admin_flag session.cookie_secure "1" </VirtualHost> This is not working 'right' in Apache 2.4. It seems to redirecting ALL accesses to the server to https, not just to the virtual host of webmail.test.htt-consult.com. So looking at Harald's post from back in 12/31/2012, I tried: <VirtualHost *:80> ServerName webmail.test.htt-consult.com ServerAlias webmail RewriteEngine On ReWriteCond %{HTTP_HOST} =webmail.test.htt-consult.com [NC] RewriteCond %{SERVER_PORT} !=443 RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R] ExpiresDefault "access plus 10 years" AddOutputFilterByType DEFLATE text/html text/plain text/xml php_admin_flag session.cookie_secure "1" </VirtualHost> And that is even worst. Attempts to access z9m9z.test.htt-consult.com/mailadmin just loop. Take this out and I can get to mailadmin. So can someone help me here with current rewriterules to force roundcube to https while not impacting on other uses of the server? thanks

3 5

gerenciar contas
by Majestic Óculos 09 Mar '17

09 Mar '17

Olá, Eu consigo adicionar outra conta de email e gerencia las no painel da roundcube? Se sim, como? Djalma Gomes Whatsapp 11 98111-7010 www.majesticoculos.com.br

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users March 2017