Users

users@lists.roundcube.net

2 participants
2900 discussions

Issue with mime types
by absolutely_free＠libero.it 12 Jun '15

12 Jun '15

Hi, everytime I upgrade RC, I get this warning: WARNING: Mimetype to file extension mapping doesn't work properly! Please check the 'mime_types' config option and run this script again. My environment is: # lsb_release -a LSB Version: :base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch Distributor ID: CentOS Description: CentOS release 6.6 (Final) Release: 6.6 Codename: Final # php -v PHP 5.3.3 (cli) (built: Oct 30 2014 20:12:53) Copyright (c) 1997-2010 The PHP Group Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies backend: MySQL web server: nginx nginx.conf: user nginx; worker_processes 2; error_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid; events { worker_connections 1024; } http { include /etc/nginx/mime.types; <--------------- The file is present on filesystem. Thank you

1 0

Updates 1.1.2 and 1.0.6 released
by Thomas Bruederli 06 Jun '15

06 Jun '15

Dear Roundcube users We just published updates to both stable versions 1.0 and 1.1 after fixing many minor bugs and adding some security improvements to the 1.1 release branch. Version 1.0.6 comes with cherry-picked fixes from the more recent version to ensure proper long term support especially in regards of security and compatibility. The security-related fixes in particular are: - XSS vulnerability in _mbox argument - security improvement in contact photo handling - potential info disclosure from temp directory See the full changelog here: http://trac.roundcube.net/wiki/Changelog Both versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. Download them from https://roundcube.net/download As usual, don't forget to backup your data before updating. And there's one more thing: Our crowdfunding campaign for Roundcube Next is still ongoing and has just been updated with more details of what we want to achieve. We'd much appreciate your support for this exciting new project. Please visit https://roundcu.be/next and spread the word about it.

1 0

Server Error: Unable to send command: A0009 UID EXPUNGE 18748
by Josep BSC 04 Jun '15

04 Jun '15

Hi all, I am posting here because when upgrading from RC 0.5.4 to RC 1.1.1 I am getting this error when I try to delete a message from Inbox folder, the rest works fine. Server Error: Unable to send command: A0009 UID EXPUNGE 18748 Even though the message is deleted from the mailbox, but it is quite annoying to have it there. It just weird that it happens only to the INBOX folder. With the previous version it worked fine, no error message was displayed. Dovecot : 1.2.3 Thanks a lot! -- Josep Manel Andrés (josep.andres(a)bsc.es) Operations - Barcelona Supercomputing Centre C/ Jordi Girona, 31 http://www.bsc.es 08034 Barcelona, Spain Tel: +34-93-405 42 14 e-mail: systems(a)bsc.es Fax: +34-93-413 77 21 ----------------------------------------------- WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

2 3

Re: [RCU] Server Error: Unable to send command: A0009 UID EXPUNGE 18748
by Josep BSC 03 Jun '15

03 Jun '15

Hi Harald, I totally agree with you. But since this is only a barely used server and only accessible from within the company's facilities..... So, I assume that it is related with the Dovecot server, isn't it? Best regards. Josep On 03/06/15 14:53, Reindl Harald wrote: > > Am 03.06.2015 um 14:49 schrieb Josep BSC: >> Dovecot : 1.2.3 > > dovecot 1.x is EOL for years now > > what's the purpose of moving to the newest and greatest RC and don't > care about a likely insecure and buggy backend mailserver? > ----------------------------------------------- WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

1 0

External AD/LDAP server address book
by Diogo Vieira 25 May '15

25 May '15

Hello, I'm trying to add an address book from an external LDAP server for one of our clients in our shared roundcube installation. From what I could tell roundcube supports this[0] but I would like to know if I can filter that address book only to appear to clients in a specific domain. Is this possible natively? In case it isn't, would it be necessary/possible to create a plugin for roundcube? [0]: at least it seems so as per the "Configuring Roundcube" section of http://trac.roundcube.net/wiki/Howto_Config/Ldap Thank you very much for your attention, -- Diogo Vieira <dfv(a)eurotux.com> Programador Eurotux Informática, S.A. | www.eurotux.com

1 0

Server Settings prefs
by list＠airstreamcomm.net 19 May '15

19 May '15

Running Roundcube 1.0.4 and we didn’t notice this for a very long time but the “Server Settings” preferences section is not visible on our install. We looked on line but could not find anything, is there some configuration option to expose this to users?

1 0

Re: [RCU] Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

On 2015-05-12 09:37, Reindl Harald wrote: > > read the wiki article > > CSRF is not about "verify authentication state", it is about a link > from the attacker leads in trigger a action in a web-application > *because you are authenticated* and hence there is a CRSF-token I wasn't sufficiently clear, I don't intend to scrape the data and embed it into another application. I plan to have the application redirect to RC itself, in the browser. The other application will never have access to the results of that page and it will not redirect back. Again, no different than you clicking on this link: http://www.amazon.com/s/?tag=duc0c-20&url=search-alias%3Daps&field-keywords… Your mail client will have no access to your Amazon account, but the search request will still be executed.

3 2

Re: [RCU] Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

On 2015-05-12 09:15, Reindl Harald wrote: > if that would work it would deserve a bugreport and a CVE because you > would bypass the > http://en.wikipedia.org/wiki/Cross-site_request_forgery protection I don't see why that would be the case. It's similar to entering https://www.google.com/?q=query+string into your browser's address bar. This wouldn't require any loss of security as RC can already verify authentication state before processing a request. For example, if you request this URL before logging in, you'll get a login page rather than the actual mailbox: https://roundcube/?_task=mail&_mbox=Archive is requested the same as if you were to request https://roundcube/?_task=mail&_mbox=Not%20Real It may not be possible with RC, but that's what I want to understand.

1 0

Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

I'm trying to develop an interface to roundcube and would like to pass it a search query for a specific folder. Does anyone know a proper way to do this over a HTTP GET request? I've tried these queries after viewing the headers during the AJAX search query (*string* is the URL encoded search query): https://roundcube/?_task=mail&_mbox=Archive&_action=search&_q=*string* https://roundcube/?_task=mail&_filter=ALL&_q=*string*&_mbox=Archive&_remote… Neither proved successful. Any throughts?

1 0

Signature positioning configuration
by Tristan Muzard 09 May '15

09 May '15

--- Original Language (French) --- Bonjour, Depuis hier les signatures ne se positionne plus à la suite en bas de message mais en lien avec la réponse, hors pour plein de raison nous somme nombreux à ne pas vouloir que les signatures soit en bas et les réponses au dessus des messages. Hors cette configuration n'est pas personnalisable. Je reste à votre dispo pour plus d'info. Cordialement. --- Auto-Translate : --- Hello, Since yesterday the signatures is positioned more as a result at the bottom of the message, but in connection with the answer, except for a lot of money because many of us do not want that signatures is down and the responses to the above messages. Excluding this configuration is not customizable. I remain at your avail for more info. Sincerely. -- Tristan

2 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users