- Users - Roundcube mailing lists

Roundcube webmail 1.7 beta released
by Pablo Zimdahl 15 Jul '25

15 Jul '25

The development team is pleased to announce the beta release for the next major version 1.7 of Roundcube webmail. With this milestone we introduce a few breaking changes, some new features, and bring full support for PHP 8.4. Some noteworthy changes are: * Make public_html/ mandatory as entry-point for HTTP daemons, protecting all installations better. * Improve support for OAuth2 (e.g. supporting OpenID Connect discovery URLs). * A Mouse-over menu on the messages list with quick action icons. * Advanced mail search syntax with more possibilities – you can now use e.g. is:unread to only match unread messages. The test file has a list of implemented keywords. * Message parts of content-type text/markdown are now rendered to HTML (if they are designated for showing). * Add a 'php' logging driver, which passes all log statements to PHP's error_log handler, allowing to unify all log output. * Requires PHP v8.1 or newer. Breaking Changes: * Dropped support for PHP < 8.1. * Removed support for MS SQL Server and Oracle (#7854) * Make public_html/ entry-point mandatory, all static resources are served via static.php (#9294, #8851) * Removed apc cache driver (replaced by apcu cache driver). * Change 'smtp_log' option default value to False For full details and downloads please see <https://github.com/roundcube/roundcubemail/releases/tag/1.7-beta>. This is a beta release and we recommend to test it on a separate environment. Migrate existing configs with either the installto.sh or the update.sh scripts. And don't forget to backup your data before installing it! Regards, Pablo -- Pablo Zimdahl Software Engineer oOo Nextcloud - Regain control over your data pablo.zimdahl(a)nextcloud.com nextcloud.com +49 711 25 24 28 90 Nextcloud GmbH Hauptmannsreute 44A, 70192 Stuttgart, Germany GF: Frank Karlitschek HRB 227086 (AG München)

1 0

edit message (plugin)
by Marc 01 Jul '25

01 Jul '25

I was wondering if there is some plugin that allows you to edit the message in place. Outlook is able to put notes in imap folders and just edit them. Would be nice if that could also be done via the web interface.

1 0

Correct way to configure with imapproxy != imap server
by Nicolas George 13 Jun '25

13 Jun '25

Hi. We have a mail server, let us call it clipper, and Roundcube running on a distinct server, let us call it localhost. We already have users, with their identities and their address books in the database. I want to add imapproxy in the chain, to reduce the load on clipper. It will run on localhost. Unfortunately, if I just write: $config['default_host'] = 'localhost'; … then for the database the mail_host column will be localhost instead of clipper, and everybody will be considered a new user when connecting the next time. I could do “UPDATE users SET mail_host = 'localhost' WHERE mail_host = 'clipper'” but I do not want to: for reasons of elegance and the ability to move back or to host multiple servers on the same instance, I want the database to contain the real host name. What are the options? I found a hack: I added “127.0.0.2 clipper” in /etc/hosts and configured imapproxy with a different FQDN for clipper. That way, Roundcube thinks it is talking to clipper when it is really talking to the proxy. And since the proxy is running on localhost I can dispense with TLS and all the security theatre of certificates. Before thinking of this hack, I tried another one that I got halfway working: configure the firewall with a NAT chain “ip daddr $clipper tcp dport 143 counter redirect to :143”. The solution with /etc/hosts is simpler and more robust. But these are hacks. Is there a clean supported solution? Thanks in advance. -- Nicolas George, responsable adjoint du Pôle numérique, pédagogique et scientifique, École normale supérieure

2 1

Periodic Request #1 - Paid Job: Checkbox to list only folders with new, unread mail
by Philip Rhoades 13 Jun '25

13 Jun '25

People, Every year or so I ask this Q but haven't had any responses . . trying yet again: Currently I have 756 primary (Maildir) mail folders - very many of which have emails moved directly into them via a .mailfilter Maildrop file. When new mail arrives in one of these folders, in RCM the folder name changes to a blue colour - which is very convenient (thank you RCM devs!) but in my case it would be EVEN MORE convenient if I didn't have to scroll down 756 lines looking for blue coloured folders . . Is it possible to have a new checkbox which causes RCM, in Classic Mode, to only display the folders which have new, unread mail in them somehow? Is there someone who knows how to code this and to do the work as a paid job? Thanks, Phil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au _______________________________________________ Users mailing list -- users(a)lists.roundcube.net To unsubscribe send an email to users-leave(a)lists.roundcube.net

3 4

[RCD] Security updates 1.5.10 and 1.6.11 released
by Aleksander Machniak 09 Jun '25

09 Jun '25

We just published security updates to the 1.6 and 1.5 LTS versions of Roundcube Webmail. They both contain a fix for recently reported security vulnerability. Security fixes: - Fix Post-Auth RCE via PHP Object Deserialization reported by firs0v. See the full changelogs in the release notes on the Github download pages for the updated versions 1.6.11 and 1.5.10. https://github.com/roundcube/roundcubemail/releases/tag/1.6.11 https://github.com/roundcube/roundcubemail/releases/tag/1.5.10 We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.5.x with this new versions. -- Alec

3 3

IOCs for the recently disclosed RCE
by Drew Weaver 05 Jun '25

05 Jun '25

Hello, Has anyone figured out any IOCs for the recently disclosed RCE? I'm guessing they were just going to Shodan and looking for any RC systems running <= 1.6.10 and then popping them automatically but does anyone have any things to look for to check? We're probably just going to re-do our instances from scratch anyway but I'm just wondering. Thanks, -Drew

1 0

1.7 changes wtf
by Nick Edwards 05 Jun '25

05 Jun '25

I know its not released but my jaw dropped when I read this *Updating to 1.7 or higher* *From Roundcube 1.7 you must configure your web server to use the public_html folder as the document root.* ummm, what the actual fsck? public_htrml ???????? who the hell uses public_html on webmail servers, or any hosting server for that matter, I've not seen that directory used since the 90s, please tell us that is a placeholder, or some left over from version 0.01a

6 7

Ever imagined about owning a
by g5dntegj＠nqmo.com 02 Jun '25

02 Jun '25

Ever imagined about owning a piece of land that is adjacent to your existing property? What if you've been using it openly and without interruption for years, even though the title isn't officially in your name? https://www.marsillpost.com

1 0

Migrating mail servers, Questions on Roundcube from 1.0.3 to 1.6.9
by Robert Moskowitz 22 May '25

22 May '25

Greetings! I have been on this list since 12/12, but really quite for the last many years. last contribution 2/19.... Anyway, I FINALLY am getting my act together and replacing all my home-grown work from 2012ish to Mail-in-a-Box. Thus Roundcube 1.6.9 I have yet to figure out how to set up the view as it is/was in 1.0.3. I can get the left pane to show the folders. Though I can't get this to be "remembered" between sessions. I have not found how to have the right pane list the messages with easy search for messages based on whatever. So guidance is greatly appreciated before I have to train my users on this version after over 10 years on 1.0.3! Thank you. I suspect there will be more questions as I work through what the upgrade will mean to my users (with my wife always responding that "upgrade" is typically a "downgrade" in services provided!).

1 0

Minimum SQL Privileges Required
by Matthew J Black 02 May '25

02 May '25

Hi All, I am enquiring as to the *minimum* privileges required by the RoundCube user to access the backend SQL (MariaDB) Server. Yes, I am aware that the Wiki says (on the Installation page) to use `GRANT ALL PRIVILEGES`, as do all of the On-Line Tutorials scattered across the Web. However, that is a *massive* security hole, especially if the backend server is *not* the same as the web server hosting RoundCube. Surely, for example, the RoundCube User does *not* need the ability to create other users or tables, drop the backend database, or grant privileges to other users. Thus, I am enquiring what *are* the *minimum* privileges required? I am going to assume - and please correct me if I am wrong - that the *required* privileges are: * DELETE, INSERT, SELECT, and UPDATE If this information is available on-line, could someone please point me in the correct direction - if not, could one of the devs and/or one of the experienced RoundCube users please let me know this information - thank you. Thanks in advance Cheers Dulux-Oz -- PEREGRINE I.T. Pty Ltd Signature ================================================== *Matthew J BLACK* M.Inf.Tech.(Data Comms) MBA B.Sc. MACS (Snr), CP, IP3P When you want it done /right/ – the first time! Phone: +61 4 0411 0089 Email: matthew(a)peregrineit.net <mailto:matthew@peregrineit.net> Web: www.peregrineit.net <http://www.peregrineit.net> View Matthew J BLACK’s profile on LinkedIn <https://au.linkedin.com/in/mjblack> This Email is intended only for the addressee. Its use is limited to that intended by the author at the time and it is not to be distributed without the author’s consent. You must not use or disclose the contents of this Email, or add the sender’s Email address to any database, list, or mailing list unless you are expressly authorised to do so. Unless otherwise stated, PEREGRINE I.T. Pty Ltd accepts no liability for the contents of this Email except where subsequently confirmed in writing. The opinions expressed in this Email are those of the author and do not necessarily represent the views of PEREGRINE I.T. Pty Ltd. This Email is confidential and may be subject to a claim of legal privilege. If you have received this Email in error, please notify the author and delete this message immediately.

3 3

Re: Minimum SQL Privileges Required
by Matthew J Black 02 May '25

02 May '25

That's a great idea (& one I was aware of - thanks) but that doesn't answer my question :-) Unless you are implying that my assumption was correct (ie DELETE, INSERT, SELECT, and UPDATE ). On 2/5/25 18:37, Reindl Harald (privat) wrote: > you can specifiy even two users to seperate read-only and writes > > $rcmail_config['db_dsnw'] = > 'mysqli://roundcube_rw:*****@127.0.0.1:3306/roundcube_db'; > $rcmail_config['db_dsnr'] = > 'mysqli://roundcube_ro:*****@127.0.0.1:3306/roundcube_db'; > > Am 02.05.25 um 10:00 schrieb Matthew J Black: >> Hi All, >> >> I am enquiring as to the *minimum* privileges required by the >> RoundCube user to access the backend SQL (MariaDB) Server. >> >> Yes, I am aware that the Wiki says (on the Installation page) to use >> `GRANT ALL PRIVILEGES`, as do all of the On-Line Tutorials scattered >> across the Web. However, that is a *massive* security hole, >> especially if the backend server is *not* the same as the web server >> hosting RoundCube. Surely, for example, the RoundCube User does *not* >> need the ability to create other users or tables, drop the backend >> database, or grant privileges to other users. >> >> Thus, I am enquiring what *are* the *minimum* privileges required? >> >> I am going to assume - and please correct me if I am wrong - that the >> *required* privileges are: >> >> * DELETE, INSERT, SELECT, and UPDATE >> >> If this information is available on-line, could someone please point >> me in the correct direction - if not, could one of the devs and/or >> one of the experienced RoundCube users please let me know this >> information - thank you. -- PEREGRINE I.T. Pty Ltd Signature ================================================== *Matthew J BLACK* M.Inf.Tech.(Data Comms) MBA B.Sc. MACS (Snr), CP, IP3P When you want it done /right/ – the first time! Phone: +61 4 0411 0089 Email: matthew(a)peregrineit.net <mailto:matthew@peregrineit.net> Web: www.peregrineit.net <http://www.peregrineit.net> View Matthew J BLACK’s profile on LinkedIn <https://au.linkedin.com/in/mjblack> This Email is intended only for the addressee. Its use is limited to that intended by the author at the time and it is not to be distributed without the author’s consent. You must not use or disclose the contents of this Email, or add the sender’s Email address to any database, list, or mailing list unless you are expressly authorised to do so. Unless otherwise stated, PEREGRINE I.T. Pty Ltd accepts no liability for the contents of this Email except where subsequently confirmed in writing. The opinions expressed in this Email are those of the author and do not necessarily represent the views of PEREGRINE I.T. Pty Ltd. This Email is confidential and may be subject to a claim of legal privilege. If you have received this Email in error, please notify the author and delete this message immediately.

1 0

Bouncing emails
by doreen.imagezone＠gmail.com 01 May '25

01 May '25

What can i do not to get bouncing emails on Gmail to the corporate email on round cube . If all SPF, DKIM & DMARC records have been corrected and validated. The server host has said i consult will the mail service provider whose round cube. How do i go about this?

3 2

Size of compose/reply pop up window
by Michael Heydekamp 30 Apr '25

30 Apr '25

Recently the default size of the compose/reply pop up window changed to an awkward size. I can manually adjust it but I can't figure out how to save it to the initial default size. I thought it was a Firefox issue at first but it appears to be isolated to this webmail. Any suggestions? Deleted cookies of the relevant domain, that didn't help. Roundube 1.6.6, Win10 Pro, FF 128.10.0esr (The text above was copied from a post in the Roundcube forum from Jan 2018, which received no response at all. See https://www.roundcubeforum.net/index.php?topic=24695.msg67347#msg67347) Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

1 0

SMTP Configuration
by White, Phil 20 Apr '25

20 Apr '25

Hi All Apologies for what must be a rather basic question -- but I've hit a brick wall in getting Roundcube working. Can anyone please help identify what is wrong? Going to the installer -- /installer/index.php?_step=3, everything appears configured correctly. Crucially, the 'Test SMTP config' and 'Test IMAP config' sections work without error. The test email sent is received at the intended destination. However, when logged in to an IMAP account, I am unable to send any email. The attempt gives the error: "SMTP Error (): Authentication failed." My SMTP server is on the same box as Roundcube. It accepts email submission via SMTP on ports 25, 465, and 587, although I could probably look at other methods (pipe, socket,...) For clients on the local network, no authentication is necessary, although I permit this if a client issues an AUTH command (because I use it for testing). For example, the following command works: swaks --server 192.168.123.254:465 --tls-on-connect --to whitepj(a)mydomain.co.uk --auth-user test_user --auth-password user_password --auth PLAIN My Roundcube configuration has been through several edits based on suggestions from the web. It is currently: $config['smtp_host'] = '192.168.123.254:25'; $config['smtp_auth_type'] = null; Roundcube version is 1.6.10 In Errors.log, I get the following: [20-Apr-2025 10:06:40 +0000]: <gln3hk80> PHP Error: SMTP server does not support authentication (POST /?_task=mail&_unlock=loading1745143624474&_framed=1&_action=send) [20-Apr-2025 10:06:40 +0000]: <gln3hk80> SMTP Error: Authentication failure: test message SIZE 8388608 8BITMIME DSN ETRN VRFY EXPN PIPELINING PIPECONNECT CHUNKING STARTTLS PRDR HELP (Code: 250) in /<...snip...>/htdocs/program/lib/Roundcube/rcube.php on line 1795 (POST /?_task=mail&_unlock=loading1745143624474&_framed=1&_action=send) Many thanks. Phil

2 3

limit e-mail adresses
by Jugendbewerb FF Kirchbach 10 Apr '25

10 Apr '25

Hallo, weiß jemand, ob es bei Roundcube eine Obergrenze für die Anzahl von Mailadressen beim Versenden von E-Mails gibt? does anyone know if Roundcube has an upper limit for number of e-mail addresses when sending e-mails? Danke Raimund

2 1

Please Help! :)
by bdm.global＠rbnapply.com 08 Apr '25

08 Apr '25

Hello, I need assistance/help. My mailbox is perpetually at capacity (currently at 96%), despite having deleted nearly all of my sent and received emails. Could you please help me with this issue? Thank you, Gordan.

4 3

Error600 with identities
by Matthias Schmidt 05 Apr '25

05 Apr '25

Hello, I changed database from an old mySQL to MariaDB10.5 on macOS I set up roundcube from scratch. Now in indentities I get an error 600 and the inbox is empty, so mails are not listed. I note a login on the server, nothing more. btw, the forum is not reachable for me. cheers and all the best Matthias

1 0

Re: Support for Roundcube webmail on smartphone
by Nicolas George 28 Mar '25

28 Mar '25

Charles-Henri Blanchard via Users (12025-03-27): > Do you provide support for Roundcube webmail on smartphones ? Hi. I do not provide support for Roundcube whatsoever beyond the users in my institution; on this mailing-list I am just a user. Roundcube works on web browsers on smartphone. The Elastic theme in the default distribution is optimized for small touchscreens. The only flaw I have to report is that the choice of the theme is stored in the database rather than a cookie. Regards, -- Nicolas George

1 0

debugging slow responsive web interface
by Marc 02 Mar '25

02 Mar '25

I have two roundcube web interfaces running on the same webserver. One of them has a slow responding UI, I already compared the config files. One is connected to a different mail server, but a regular imap client is just fast with that server. How should I go about debugging this?

3 2

Tool for admin batch operations
by Nicolas George 25 Feb '25

25 Feb '25

Hi. I am looking for a tool to perform some admin operations on the Roundcube database: - batch export of users' address books; - add a identity to a user; - … including a user who has never logged in; - delete or alter an identity. OwnCloud / NextCloud have “occ”, I am hoping Roundcube has something similar that I have not yet managed to find. Otherwise I shall start working on it. Thanks in advance. -- Nicolas George, responsable adjoint du Pôle numérique, pédagogique et scientifique, École normale supérieure

1 0

Update 1.6.10 released
by Aleksander Machniak 08 Feb '25

08 Feb '25

This is the next service release to update the stable version 1.6. Here's the full changelog: - IMAP: Partial support for ANNOTATE-EXPERIMENT-1 extension (RFC 5257) - OAuth: Support standard authentication with short-living password received with OIDC token (#9530) - Fix PHP warnings (#9616, #9611) - Fix whitespace handling in vCard line continuation (#9637) - Fix current script state after initial scripts creation in managesieve_kolab_master mode - Fix rcube_imap::get_vendor() result (and PHP warning) on Zimbra server (#9650) - Fix regression causing inline SVG images to be missing in mail preview (#9644) - Fix plugin "virtuser_file" to handle backward slashes in username (#9668) - Fix PHP fatal error when parsing some malformed BODYSTRUCTURE responses (#9689) - Fix insert_or_update() and reading database server config on PostgreSQL (#9710) - Fix Oauth issues with use_secure_urls=true (#9722) - Fix handling of binary mail parts (e.g. PDF) encoded with quoted-printable (#9728) - Fix links in comments and config to https:// where available (#9759, #9756) - Fix decoding of attachment names encoded using both RFC2231 and RFC2047 standards (#9725) This version is considered stable and we recommend to update all productive installations of Roundcube with it. Please do backup your data before updating! https://github.com/roundcube/roundcubemail/releases/tag/1.6.10 Please do backup your data before updating! -- Alec

1 0

Installation on windows 10
by Dave 07 Feb '25

07 Feb '25

Hi All I used to use Roundcube when I registered my domain Hallnet1.uk with Gandi .net. Since moving away from Gandi I have not found as good a user interface. Can you suggest how to register and use Roundcube via a browser or install it as a stand alone email client on my windows 10 pro pc. Any and all help will be agreat help thanks in advance David

3 2

Re: Users Digest, Vol 201, Issue 1
by info＠ilmaterasso.eu 04 Feb '25

04 Feb '25

1 0

sexyadultdirectory Website
by natoma7531＠eluxeer.com 04 Feb '25

04 Feb '25

sexyadultdirectory website brings you the best free porn in incredible quality and variety for your satisfaction. The web is very useful if you are looking for lesbian porn, Asian porn, or beautiful Indian girls. It is a website that has a lot of potentials and that you should visit to enjoy the best porn online. https://www.sexyadultdirectory.com/

1 0

c72592fc593a10e7af7b4f1619da983019a55f5a
by mathan＠thekingsberry.com 03 Feb '25

03 Feb '25

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users