Users December 2025

users@lists.roundcube.net

8 participants
6 discussions

Roundcube webmail 1.7 RC2 released
by Pablo Zimdahl 15 Dec '25

15 Dec '25

We just published the second release candidate for the next major version 1.7 of Roundcube webmail. This release fixes two security issues and one syntax error in a database migration file for Postgres databases. The changes are: - Fix Cross-Site-Scripting vulnerability via SVG’s animate tag reported by Valentin T., CrowdStrike. - Fix Information Disclosure vulnerability in the HTML style sanitizer reported by somerandomdev. - Fix syntax error in DDL scripts for Postgres (#10052) The tarballs can be downloaded from github.com or roundcube.net: https://github.com/roundcube/roundcubemail/releases/tag/1.7-rc2 https://roundcube.net/download/ We believe it is production ready, but we recommend to test it on a separate environment. Existing setups can be migrated with either the `installto.sh` or the `update.sh` scripts. Please don't forget to backup your data before updating! Regards, Pablo -- Pablo Zimdahl Software Engineer oOo Nextcloud - Regain control over your data pablo.zimdahl(a)nextcloud.com nextcloud.com +49 711 25 24 28 90 Nextcloud GmbH Hauptmannsreute 44A, 70192 Stuttgart, Germany GF: Frank Karlitschek HRB 227086 (AG München)

1 0

Security updates 1.5.12 and 1.6.12 released
by Aleksander Machniak 14 Dec '25

14 Dec '25

We just published security updates to the 1.6 and 1.5 LTS versions of Roundcube Webmail. They both contain fixes for recently reported two security vulnerabilities. Security fixes: - Fix Cross-Site-Scripting vulnerability via SVG's animate tag reported by Valentin T., CrowdStrike. - Fix Information Disclosure vulnerability in the HTML style sanitizer reported by somerandomdev. See the full changelogs in the release notes on the Github download pages for the updated versions 1.6.12 and 1.5.12. https://github.com/roundcube/roundcubemail/releases/tag/1.6.12 https://github.com/roundcube/roundcubemail/releases/tag/1.5.12 We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.5.x with this new versions. -- Alec

1 0

Roundcube 1.7 RC released
by Pablo Zimdahl 12 Dec '25

12 Dec '25

The development team is pleased to announce the release candidate for the next major version 1.7 of Roundcube webmail! With this milestone we introduce a few breaking changes (see below) and some further improvements in comparison to 1.7-beta2. Some noteworthy changes are: * Add scope parameter to contact search (#9863) * Add ability to chose from all available contact fields on CSV import (#9419) * Add a new plugin called `markdown_editor` that provides an alternative editor to compose emails using Markdown syntax. * Add `rel=’noopener’` to all links opening in a new window to mitigate against misuse in older browsers. Breaking Changes: * Remove `contact_search_name` option in favor of `contactlist_name_template` (#9832) * Replace session attribute `changed` by `expires_at` (to allow for variable session lengths per-user in a future change). * Password: Removed the (insecure) `virtualmin` driver (#8007) For full details and download links please read the release notes: https://github.com/roundcube/roundcubemail/releases/tag/1.7-rc We believe it is production ready, but we recommend to test it on a separate environment. Migrate existing configs with either the `installto.sh` or the `update.sh` scripts. And don’t forget to backup your data before installing it! Regards, Pablo -- Pablo Zimdahl Software Engineer oOo Nextcloud - Regain control over your data pablo.zimdahl(a)nextcloud.com nextcloud.com +49 711 25 24 28 90 Nextcloud GmbH Hauptmannsreute 44A, 70192 Stuttgart, Germany GF: Frank Karlitschek HRB 227086 (AG München)

1 0

Seeking DNS Configuration Guidance for Roundcube Webmail on HestiaCP
by neo＠myheat.co.za 06 Dec '25

06 Dec '25

Hello everyone, I've recently installed Roundcube webmail on a VPS server running HestiaCP and I'm in the process of configuring the DNS records for one of my domains. I'm seeking your guidance to ensure my DNS configuration properly supports Roundcube. I've configured DNS records for my domain through my hosting provider. The configuration includes: A Records: Root domain pointing to server IP "mail" subdomain pointing to server IP CNAME Records: "www" pointing to mail.subdomain "ftp" pointing to mail.subdomain "webmail" pointing to a mail-related subdomain MX Record: Pointing to the mail subdomain TXT Records: SPF record DMARC policy SRV Records: Various email protocol records Could you please confirm what CNAME records Roundcube expects for a standard webmail installation? I've configured a webmail CNAME record, but I want to verify this is correct. Is there a specific DNS record I should create for Roundcube to function properly? I've seen some installations use webmail.domain.tld as the access point, but I'm unsure if this is a requirement or just a convention. When I try to access Roundcube, I'm encountering configuration issues. I've attempted to set up the HestiaCP templates for Roundcube but received errors about missing template files. I would greatly appreciate your guidance on the proper DNS configuration to ensure Roundcube works seamlessly with my setup. If there are any documentation resources you could point me to regarding DNS requirements for Roundcube, that would also be extremely helpful.

3 2

Change appearance RoundCube front page
by tony＠yarraboy.com 05 Dec '25

05 Dec '25

Am baffled. My RoundCube front page has for a long time had three columns (folders, sender and message) and suddenly it has changed to two. The folders column is no longer showing. How can I revert to original layout? Tony Berry, Author and accredited editor (IPEd); Advanced member Chartered Institute of Editing and Proofreading; Diploma Professional Writing & Editing; Member Australian Society of Authors.

2 1

ZIGGO IP-adres maakt geen verbinding met XXXXXXX.nl/roundcube/
by henri＠kentaur.nl 04 Dec '25

04 Dec '25

ZIGGO IP-adres maakt geen verbinding met XXXXXXX.nl/roundcube/ Alleen als ik gebruik maak van een VPN (dus een ander IP-adres) kan ik contact maken of (RoundCube) webmail te gebruiken. Alle bookmarks links werken wel normaal. Mobiele telefoons met ODIDO of Libara (KPN) geven wel direct toegang. Meerdere browsers geprobeerd, Chrome, Edge, Firefox, Yahoo, Brave, Opera. ZIGGO-Helpdesk kent dit probleem nog niet en suggereert als laatste (na consultatie van deze ZIGGO-Community) een hard reset van de modem. Ik hoop op reactie/antwoord/hulp.... HENRI

2 2

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users December 2025