Users

users@lists.roundcube.net

5 participants
2922 discussions

Roundcube Next is coming and we need your help!
by Thomas Bruederli 18 Jun '15

18 Jun '15

Dear subscribers What started with the hypothetical question, "how would we implement Roundcube if we could start over again?" [1], has now grown into a concrete plan how to create the responsive, fast and beautiful successor of Roundcube. It has become clear that the architectural changes necessary for this are way too big to be applied to the current Roundcube codebase without breaking the compatibility in a major way. That's why we're planning to define Roundcube One as feature complete and focus on a new core engine for the future Roundcube webmail application. In order to make than happen, we can reply on long time partners who supported Roundcube already in the past. Kolab Systems has offered to drive this project by contributing their well established software development capabilities and dedicate additional developer power to help us get the work done. In addition to that, the folks from Kolab Digital in London are going to share their expertise on the UX and design part of it. Two major goals are important to us: Besides improving the core technology and modernizing the UI, we also aim to move some of the groupware features we currently see in the Kolab suite into Roundcube itself and make them available for other backends. And we'll certainly provide a migration path to existing Roundcube installations. So to enable us to achieve these high stake goals together for Roundcube Next we proudly announce our crowdfunding campaign at Indiegogo. Go to https://roundcu.be/next and back us if you can or help us spread the word about it. Your websites, blogs and social media channels can help us reach more people. Or if you're working for, or are a customer of, an ISP who's already using Roundcube, please forward this campaign to your product manager. Let's challenge today's email and create the most awesome webmail application people deserve to communicate freely using systems and services they can trust. The next Roundcube will of course again be 100% open source and made available to everybody. This is your chance to contribute to the success of free software. Many thanks to all of our past, current and future supporters! Sincerely, The Roundcube Dev Team [1] https://roundcubeinbox.wordpress.com/2014/09/12/roundcube-next-if-we-would-…

2 1

Text signature vs. HTML signature
by Michael Heydekamp 18 Jun '15

18 Jun '15

Hi there, although I do really hate HTML messages (and their multipart/alternative incarnations, as they're most often misformatted), there's sometimes no way around it to use them. Especially if you're starting an own business and need to compose messages with HTML signatures, including a logo and this kind of stuff. So I expected Roundcube to be able to create a) a signature in plain text format for text messages, and b) an alternative signature in HTML format for HTML messages - for the same account, of course. Therefore, today I played the very first time with the toggle "HTML signature". But I really don't get what this option does (or should do). Let's say I have this plain text signature ("HTML signature" de-selected): -------------------------------- > -- > Michael Xxxxxxxxx > Tel.: +49-(0)211-xxxxxxx > Mobil: +49-(0)172-xxxxxxx > eMail: michael(a)xxxxxxxxx.de > WWW: http://www.xxxxxxxxx.de -------------------------------- If I now select the toggle "HTML signature" and de-select it again, the following plain text signature is being returned: ---------------------------------- > -- > Michael Xxxxxxxxx > Tel.: +49-(0)211-xxxxxxx > Mobil: +49-(0)172-xxxxxxx > eMail: michael(a)xxxxxxxxx.de > WWW: http://www.xxxxxxxxx.de [1] > > Links: > ------ > [1] http://www.xxxxxxxxx.de ---------------------------------- Not only that there is an IMO senseless additional link being created, also the blanks after "Tel." etc. are gone, so the contacts are not properly left-aligned anymore. If I do the same again, the following plain text signature is being returned: ------------------------------------------ > -- > Michael Xxxxxxxxx > Tel.: +49-(0)211-xxxxxxx > Mobil: +49-(0)172-xxxxxxx > eMail: michael(a)xxxxxxxxx.de > WWW: http://www.xxxxxxxxx.de [1] [1 [1]] > Links: > ------ > [1] http://www.xxxxxxxxx.de [1] > > Links: > ------ > [1] http://www.xxxxxxxxx.de ------------------------------------------ Even more senseless links! And so on... As I said, I don't get it. What's that for...? Can somebody explain? The creation of the body of HTML messages seems to even worse, but that's a different issue for a different thread then. Any help appreciated. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

2 5

Issue with mime types
by absolutely_free＠libero.it 12 Jun '15

12 Jun '15

Hi, everytime I upgrade RC, I get this warning: WARNING: Mimetype to file extension mapping doesn't work properly! Please check the 'mime_types' config option and run this script again. My environment is: # lsb_release -a LSB Version: :base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch Distributor ID: CentOS Description: CentOS release 6.6 (Final) Release: 6.6 Codename: Final # php -v PHP 5.3.3 (cli) (built: Oct 30 2014 20:12:53) Copyright (c) 1997-2010 The PHP Group Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies backend: MySQL web server: nginx nginx.conf: user nginx; worker_processes 2; error_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid; events { worker_connections 1024; } http { include /etc/nginx/mime.types; <--------------- The file is present on filesystem. Thank you

1 0

Updates 1.1.2 and 1.0.6 released
by Thomas Bruederli 06 Jun '15

06 Jun '15

Dear Roundcube users We just published updates to both stable versions 1.0 and 1.1 after fixing many minor bugs and adding some security improvements to the 1.1 release branch. Version 1.0.6 comes with cherry-picked fixes from the more recent version to ensure proper long term support especially in regards of security and compatibility. The security-related fixes in particular are: - XSS vulnerability in _mbox argument - security improvement in contact photo handling - potential info disclosure from temp directory See the full changelog here: http://trac.roundcube.net/wiki/Changelog Both versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. Download them from https://roundcube.net/download As usual, don't forget to backup your data before updating. And there's one more thing: Our crowdfunding campaign for Roundcube Next is still ongoing and has just been updated with more details of what we want to achieve. We'd much appreciate your support for this exciting new project. Please visit https://roundcu.be/next and spread the word about it.

1 0

Server Error: Unable to send command: A0009 UID EXPUNGE 18748
by Josep BSC 04 Jun '15

04 Jun '15

Hi all, I am posting here because when upgrading from RC 0.5.4 to RC 1.1.1 I am getting this error when I try to delete a message from Inbox folder, the rest works fine. Server Error: Unable to send command: A0009 UID EXPUNGE 18748 Even though the message is deleted from the mailbox, but it is quite annoying to have it there. It just weird that it happens only to the INBOX folder. With the previous version it worked fine, no error message was displayed. Dovecot : 1.2.3 Thanks a lot! -- Josep Manel Andrés (josep.andres(a)bsc.es) Operations - Barcelona Supercomputing Centre C/ Jordi Girona, 31 http://www.bsc.es 08034 Barcelona, Spain Tel: +34-93-405 42 14 e-mail: systems(a)bsc.es Fax: +34-93-413 77 21 ----------------------------------------------- WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

2 3

Re: [RCU] Server Error: Unable to send command: A0009 UID EXPUNGE 18748
by Josep BSC 03 Jun '15

03 Jun '15

Hi Harald, I totally agree with you. But since this is only a barely used server and only accessible from within the company's facilities..... So, I assume that it is related with the Dovecot server, isn't it? Best regards. Josep On 03/06/15 14:53, Reindl Harald wrote: > > Am 03.06.2015 um 14:49 schrieb Josep BSC: >> Dovecot : 1.2.3 > > dovecot 1.x is EOL for years now > > what's the purpose of moving to the newest and greatest RC and don't > care about a likely insecure and buggy backend mailserver? > ----------------------------------------------- WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

1 0

External AD/LDAP server address book
by Diogo Vieira 25 May '15

25 May '15

Hello, I'm trying to add an address book from an external LDAP server for one of our clients in our shared roundcube installation. From what I could tell roundcube supports this[0] but I would like to know if I can filter that address book only to appear to clients in a specific domain. Is this possible natively? In case it isn't, would it be necessary/possible to create a plugin for roundcube? [0]: at least it seems so as per the "Configuring Roundcube" section of http://trac.roundcube.net/wiki/Howto_Config/Ldap Thank you very much for your attention, -- Diogo Vieira <dfv(a)eurotux.com> Programador Eurotux Informática, S.A. | www.eurotux.com

1 0

Server Settings prefs
by list＠airstreamcomm.net 19 May '15

19 May '15

Running Roundcube 1.0.4 and we didn’t notice this for a very long time but the “Server Settings” preferences section is not visible on our install. We looked on line but could not find anything, is there some configuration option to expose this to users?

1 0

Re: [RCU] Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

On 2015-05-12 09:37, Reindl Harald wrote: > > read the wiki article > > CSRF is not about "verify authentication state", it is about a link > from the attacker leads in trigger a action in a web-application > *because you are authenticated* and hence there is a CRSF-token I wasn't sufficiently clear, I don't intend to scrape the data and embed it into another application. I plan to have the application redirect to RC itself, in the browser. The other application will never have access to the results of that page and it will not redirect back. Again, no different than you clicking on this link: http://www.amazon.com/s/?tag=duc0c-20&url=search-alias%3Daps&field-keywords… Your mail client will have no access to your Amazon account, but the search request will still be executed.

3 2

Re: [RCU] Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

On 2015-05-12 09:15, Reindl Harald wrote: > if that would work it would deserve a bugreport and a CVE because you > would bypass the > http://en.wikipedia.org/wiki/Cross-site_request_forgery protection I don't see why that would be the case. It's similar to entering https://www.google.com/?q=query+string into your browser's address bar. This wouldn't require any loss of security as RC can already verify authentication state before processing a request. For example, if you request this URL before logging in, you'll get a login page rather than the actual mailbox: https://roundcube/?_task=mail&_mbox=Archive is requested the same as if you were to request https://roundcube/?_task=mail&_mbox=Not%20Real It may not be possible with RC, but that's what I want to understand.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users