Softpedia >Linux >Communications >Email >RoundCube Webmail >  Changelog

RoundCube Webmail Changelog

What's new in RoundCube Webmail 1.4.2

Jan 9, 2020
  • - Plugin API: Make actionbefore, before, actionafter and after events working with plugin actions (#7106)
  • - Managesieve: Replace "Filter disabled" with "Filter enabled" (#7028)
  • - Managesieve: Fix so modifier type select wasn't hidden after hiding modifier select on header change
  • - Managesieve: Fix filter selection after removing a first filter (#7079)
  • - Markasjunk: Fix marking more than one message as spam/ham with email_learn driver (#7121)
  • - Password: Fix kpasswd and smb drivers' double-escaping bug (#7092)
  • - Enigma: Add script to import keys from filesystem to the db storage (for multihost)
  • - Installer: Fix DB Write test on SQLite database ("database is locked" error) (#7064)
  • - Installer: Fix so SQLite DSN with a relative path to the database file works in Installer
  • - Elastic: Fix contrast of warning toasts (#7058)
  • - Elastic: Simple search in pretty selects (#7072)
  • - Elastic: Fix hidden list widget on mobile/tablet when selecting folder while search menu is open (#7120)
  • - Fix so type attribute on script tags is not used on HTML5 pages (#6975)
  • - Fix unread count after purge on a folder that is not currently selected (#7051)
  • - Fix bug where Enter key didn't work on messages list in "List" layout (#7052)
  • - Fix bug where deleting a saved search in addressbook caused display issue on sources/groups list (#7061)
  • - Fix bug where a new saved search added after removing all searches wasn't added to the list (#7061)
  • - Fix bug where a new contact group added after removing all groups from addressbook wasn't added to the list
  • - Fix bug where Ctype extension wasn't required in Installer and INSTALL file (#7049)
  • - Fix so install-jsdeps.sh removes Bootstrap's sourceMappingURL (#7035)
  • - Fix so use of Ctrl+A does not scroll the list (#7020)
  • - Fix/remove useless keyup event handler on username input in logon form (#6970)
  • - Fix bug where cancelling switching from HTML to plain text didn't set the flag properly (#7077)
  • - Fix bug where HTML reply could add an empty line with extra indentation above the original message (#7088)
  • - Fix matching multiple X-Forwarded-For addresses with 'proxy_whitelist' (#7107)
  • - Fix so displayed maximum attachment size depends also on 'max_message_size' (#7105)
  • - Fix bug where 'skins_allowed' option didn't enforce user skin preference (#7080)
  • - Fix so contact's organization field accepts up to 128 characters (it was 50)
  • - Fix bug where listing tables in PostgreSQL database with db_prefix didn't work (#7093)
  • - Fix bug where 'text' attribute on body tag was ignored when displaying HTML message (#7109)
  • - Fix bug where next message wasn't displayed after delete in List mode (#7096)
  • - Fix so number of contacts in a group is not limited to 200 when redirecting to mail composer from Contacts (#6972)
  • - Fix malformed characters in HTML message with charset meta tag not in head (#7116)

New in RoundCube Webmail 1.4.0 (Nov 12, 2019)

  • Email Resent (Bounce) feature
  • Improved Mailvelope integration
  • Support for Redis and Memcached cache
  • Support for SMTPUTF8 and GSSAPI

New in RoundCube Webmail 1.3.10 (Sep 9, 2019)

  • Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled (#6723)
  • Enigma: Fix bug where revoked users/keys were not greyed out in key info
  • Enigma: Fix error message when trying to encrypt with a revoked key (#6607)
  • Enigma: Fix "decryption oracle" bug [CVE-2019-10740] (#6638)
  • Fix compatibility with kolab/net_ldap3 > 1.0.7 (#6785)
  • Fix bug where bmp images couldn't be displayed on some systems (#6728)
  • Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp (#6744)
  • Fix bug where bold/strong text was converted to upper-case on html-to-text conversion (6758)
  • Fix bug in rcube_utils::parse_hosts() where %t, %d, %z could return only tld (#6746)
  • Fix bug where Next/Prev button in mail view didn't work with multi-folder search result (#6793)
  • Fix bug where selection of columns on messages list wasn't working
  • Fix bug in converting multi-page Tiff images to Jpeg (#6824)
  • Fix wrong messages order after returning to a multi-folder search result (#6836)
  • Fix PHP 7.4 deprecation: implode() wrong parameter order (#6866)
  • Fix bug where it was possible to bypass the position:fixed CSS check in received messages (#6898)
  • Fix bug where some strict remote URIs in url() style were unintentionally blocked (#6899)
  • Fix bug where it was possible to bypass the CSS jail in HTML messages using :root pseudo-class (#6897)
  • Fix bug where it was possible to bypass href URI check with data:application/xhtml+xml URIs (#6896)

New in RoundCube Webmail 1.3.7 (Jul 31, 2018)

  • Fix PHP Warning: Use of undefined constant IDNA_DEFAULT on systems without php-intl (#6244)
  • Fix bug where some parts of quota information could have been ignored (#6280)
  • Fix bug where some escape sequences in html styles could bypass security checks
  • Fix bug where some forbidden characters on Cyrus-IMAP were not prevented from use in folder names
  • Fix bug where only attachments with the same name would be ignored on zip download (#6301)
  • Fix bug where unicode contact names could have been broken/emptied or caused DB errors (#6299)
  • Fix bug where after "mark all folders as read" action message counters were not reset (#6307)
  • Enigma: [EFAIL] Don't decrypt PGP messages with no MDC protection (#6289)
  • Fix bug where some HTML comments could have been malformed by HTML parser (#6333)

New in RoundCube Webmail 1.3.6 (Apr 20, 2018)

  • Fix parsing date strings (e.g. from a Date: mail header) with comments (#6216)
  • Fix PHP 7.2: count(): Parameter must be an array in enchant-based spellchecker (#6234)
  • Fix possible IMAP command injection and type juggling vulnerabilities (#6229)
  • Enigma: Fix key selection for signing
  • Enigma: Enable keypair generation on Internet Explorer 11
  • Fix check_request() bypass in places using get_uids() CVE-2018-9846 (#6238)
  • Fix bug where usernames without domain part could be malformed or converted to lower-case on logon (#6224)

New in RoundCube Webmail 1.3.5 (Mar 21, 2018)

  • Managesieve: Fix bug where text: syntax was forced for strings longer than 1024 characters (#6143)
  • Managesieve: Fix missing Save button in Edit Filter Set page of Classic skin (#6154)
  • Fix duplicated labels in Test SMTP Config section (#6166)
  • Fix PHP Warning: exif_read_data(...): Illegal IFD size (#6169)
  • Enigma: Fix key generation in Safari by upgrade to OpenPGP 2.6.2 (#6149)
  • Fix security issue in remote content blocking on HTML image and style tags (#6178)
  • Added 9pt and 11pt to the list of font sizes in HTML editor
  • Fix handling encoding of HTML tags in "inline" JSON output (#6207)
  • Fix bug where some unix timestamps were not handled correctly by rcube_utils::anytodatetime() (#6212)

New in RoundCube Webmail 1.3.4 (Jan 17, 2018)

  • Fix a couple of warnings on PHP 7.2 (#6098)
  • Fix bug where contacts search could skip some records (#6130)
  • Fix possible information leak - add more strict sql error check on user creation (#6125)
  • Fix broken long filenames when using imap4d server - workaround server bug (#6048)
  • Fix so temp_dir misconfiguration prints an error to the log (#6045)
  • Fix untagged COPYUID responses handling - again (#5982)
  • Fix PHP warning "idn_to_utf8(): INTL_IDNA_VARIANT_2003 is deprecated" with PHP 7.2 (#6075)
  • Fix bug where Archive folder wasn't auto-created on login with create_default_folders=true
  • Fix performance issue when parsing malformed and long Date header (#6087)
  • Fix syntax error in mssql.initial.sql (#6097)
  • Fix bug where contacts export by selection returned no more than 10 entries (#6103)
  • Fix searching contacts by address in LDAP source (#6084)
  • Fix X-Frame-Options: ALLOW-FROM support, remove custom click-jacking protection (#6057)

New in RoundCube Webmail 1.3.3 (Nov 21, 2017)

  • Fix decoding of mailto: links with + character in HTML messages (#6020)
  • Fix false reporting of failed upgrade in installto.sh (#6019)
  • Fix file disclosure vulnerability caused by insufficient input validation [CVE-2017-16651] (#6026)
  • Fix mangled non-ASCII characters in links in HTML messages (#6028)

New in RoundCube Webmail 1.3.0 (Sep 4, 2017)

  • Update to TinyMCE 4.5.7
  • Fix bug where invalid recipients could be silently discarded (#5739)
  • Fix conflict with _gid cookie of Google Analytics (#5748)
  • Print error from CLI scripts when system/exec function is disabled (#5744)
  • Fix bug where comment notation within style tag would cause the whole style to be ignored (#5747)
  • Fix bug where it wasn't possible to scroll folders list in Edge (#5750)
  • Fix folders list sorting on Windows - if php-intl is available (#5732)
  • Fix addressbook searching by gender (#5757)
  • Fix prevention from using % and * characters in folder name (#5762)
  • Fix POST parameter reflection in default_charset selector (#5768)
  • Enigma: Fix compatibility with assets_dir
  • Managesieve: Skip redundant LISTSCRIPTS command
  • Fix SQL syntax error on MariaDB 10.2 (#5774)
  • Fix bug where zipdownload ignored files with the same name (#5777)
  • Fix bug where it wasn't possible to set timezone to auto-detected value (#5782)

New in RoundCube Webmail 1.2.0 (May 23, 2016)

  • Enigma: Added enigma_debug option
  • Fix message list multi-select/deselect issue (#5219)
  • Fix bug where getting HTML editor content could steal focus from other form controls (#5223)
  • Fix bug where contact search menu fields where always unchecked in Larry skin
  • Fix autoloading of 'html' class
  • Fix bug where Encrypt button appears when switching editor to HTML (#5235)
  • Fix XSS issue in href attribute on area tag (#5240)

New in RoundCube Webmail 1.1.2 (Aug 24, 2015)

  • XSS vulnerability in _mbox argument
  • security improvement in contact photo handling
  • potential info disclosure from temp directory

New in RoundCube Webmail 1.1.1 (Mar 20, 2015)

  • ACL: Allow other plugins to adjust the list of permissions and groups to edit
  • Add possibility to print contact information (of a single contact)
  • Add possibility to configure max_allowed_packet value for all database engines (#1490283)
  • Improved handling of storage errors after message is sent
  • Update to TinyMCE 4.1.9
  • Unified request* event arguments handling, added support for _unlock and _action parameters
  • Security: Generate random hash for the per-user local storage prefix (#1490279)
  • Fix refreshing of drafts list when sending a message which was saved in meantime (#1490238)
  • Fix saving/sending emoticon images when assets_dir is set
  • Fix PHP fatal error when visiting Vacation interface and there's no sieve script yet (#1490292)
  • Fix setting max packet size for DB caches and check packet size also in shared cache
  • Fix needless security warning on BMP attachments display (#1490282)
  • Fix handling of some improper constructs in format=flowed text as per the RFC3676[4.5] (#1490284)
  • Fix performance of rcube_db_mysql::get_variable()
  • Fix missing or not up-to-date CATEGORIES entry in vCard export (#1490277)
  • Fix fatal errors on systems without mbstring extension or mb_regex_encoding() function (#1490280)
  • Fix cursor position on reply below the quote in HTML mode (#1490263)
  • Fix so "over quota" errors are displayed also in message compose page
  • Fix duplicate entries supression in autocomplete result (#1490290)
  • Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281)
  • Fix parsing invalid HTML messages with BOM after (#1490291)
  • Fix duplicate entry on timezones list in rcube_config::timezone_name_from_abbr() (#1490293)
  • Fix so localized folder name is displayed in multi-folder search result (#1490243)
  • Fix javascript error after creating a folder which is a subfolder of another one (#1490297)
  • Fix bug where subject of sent/saved message was removed if mbstring wasn't installed (#1490295)
  • Fix missing vcard_attachment icon on messages list (#1490303)
  • Fix storing signatures with big images in MySQL database (#1490306)
  • Fix Opera browser detection in javascript (#1490307)
  • Fix so search filter, scope and fields are reset on folder change
  • Fix rows count when messages search fails (#1490266)
  • Fix bug where spellchecking in HTML editor do not work after switching editor type more than once (#1490311)
  • Fix bug where TinyMCE area height was too small on slow network connection (#1490310)
  • Fix backtick character handling in sql queries (#1490312)
  • Fix redirect URL for attachments loaded in an iframe when behind a proxy (#1490191)
  • Fix menu container references to point to the actual element (#1490313)
  • Fix javascripts errors in IE8 - lack of Event.which, focusing a hidden element (#1490318)
  • Most important changes in version 1.1.0:
  • Allow searching across multiple folders
  • Improved support for screen readers and assistive technology using WCAG 2.0 and WAI ARIA standards
  • Update to TinyMCE 4.1 to support images in HTML signatures (copy & paste)
  • Added namespace filter and folder searching in folder manager
  • New config option to disable UI elements/actions
  • Stronger password encryption using OpenSSL
  • Support for the IMAP SPECIAL-USE extension
  • Support for Oracle as database backend
  • Manage 3rd party libs with Composer

New in RoundCube Webmail 1.1.0 (Feb 8, 2015)

  • Allow searching across multiple folders
  • Improved support for screen readers and assistive technology using WCAG 2.0 and WAI ARIA standards
  • Update to TinyMCE 4.1 to support images in HTML signatures (copy & paste)
  • Added namespace filter and folder searching in folder manager
  • New config option to disable UI elements/actions
  • Stronger password encryption using OpenSSL
  • Support for the IMAP SPECIAL-USE extension
  • Support for Oracle as database backend
  • Manage 3rd party libs with Composer

New in RoundCube Webmail 1.0.5 (Jan 26, 2015)

  • Fix download options menu (added by zipdownload plugin) in classic skin (#1490228)
  • Fix blocked.gif image usage with assets_dir set
  • Fix bug where max_group_members was ignored when adding a new contact (#1490214)
  • Hide MDN and DSN options in compose if disabled by admin (#1490221)
  • Fix checks based on window.ActiveXObject in IE > 10
  • Fix XSS issue in style attribute handling (#1490227)
  • Fix bug where Drafts list wasn't updated on draft-save action in new window (#1490225)
  • Fix so "set as default" option is hidden if identities_level > 1 (#1490226)
  • Fix bug where search was reset after returning from compose visited for reply
  • Fix javascript error in "IE 8.0/Tablet PC" browser (#1490210)
  • Fix bug where Reply-To address was ignored on reply to messages sent by self (#1490233)
  • Fix bug where empty fieldmap config entries caused empty results of ldap search (#1490229)
  • Fix bug where drafts list wasn't refreshed after draft message was sent from another window (#1490238)
  • Fix keyboard navigation and css in datepicker widget across many Firefox versions

New in RoundCube Webmail 1.1 RC (Jan 5, 2015)

  • Update jQuery to version 2.1.3
  • Improve system security by using optional special URL with security token - use_secure_urls
  • Allow to define separate server/path for image/js/css files - assets_url/assets_dir
  • Sync vendor folder if exists in source package (#1490145)
  • Avoid useless reloading list when resetting search with active filter (#1490057)
  • Fix invalid folder selection if clicked while busy (#1490158)
  • Fix import of multiple contact email addresses from Outlook-csv format (#1490169)
  • Fix drag-n-drop to folders expanded while dragging (#1490157)
  • Fix import of multiple contact groups from Google-csv format (#1490159)
  • Fix import of contacts with multiple email addresses from Google-csv format (#1490178)
  • Fix bugs where CSRF attacks were still possible on some requests
  • Fix some rcube_utils::anytodatetime() corner cases with timezone mismatches (#1490163)
  • Improve move-to and contact-export button in classic skin (#1490166)
  • Fix wrong icon for download button in classic skin
  • Fix bug where sent message was saved in Sent folder even if disabled by user (#1490208)

New in RoundCube Webmail 1.0.3 (Oct 1, 2014)

  • Fix insert-signature command in external compose window if opened from inline compose screen (#1490074)
  • Initialize HTML editor before restoring a message from localStorage (#1490016)
  • Add 'sig_max_lines' config option to default config file (#1490071)
  • Add option to specify IMAP connection socket parameters - imap_conn_options (#1489948)
  • Add option to set default message list mode - default_list_mode (#1487312)
  • Enable contextmenu plugin for TinyMCE editor (#1487014)
  • Fix some mime-type to extension mapping checks in Installer (#1489983)
  • Fix errors when using localStorage in Safari's private browsing mode (#1489996)
  • Fix bug where $Forwarded flag was being set even if server didn't support it (#1490000)
  • Fix various iCloud vCard issues, added fallback for external photos (#1489993)
  • Fix invalid Content-Type header when send_format_flowed=false (#1489992)
  • Fix errors when adding/updating contacts in active search (#1490015)
  • Fix incorrect thumbnail rotation with GD and exif orientation data (#1490029)
  • Fix contacts list update after adding/deleting/moving a contact (#1490028, #1490033)
  • Fix handling of email addresses with quoted domain part (#1490040)
  • Fix comm_path update on task switch (#1490041)
  • Fix error in MSSQL update script 2013061000.sql (#1490061)
  • Fix validation of email addresses with IDNA domains (#1490067)

New in RoundCube Webmail 0.9.5 (Feb 4, 2014)

  • Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
  • Fix failing vCard import when email address field contains spaces (#1489386)
  • Fix default spell-check configuration after Google suspended their spell service
  • Fix iframe onload for upload errors handling (#1489379)
  • Fix address matching in Return-Path header on identity selection (#1489374)
  • Fix text wrapping issue with long unwrappable lines (#1489371)
  • Fixed mispelling: occured -> occurred (#1489366)
  • Fixed issues where HTML comments inside style tag would hang Internet Explorer
  • Fix setting domain in virtualmin password driver (#1489332)
  • Hide Delivery Status Notification option when smtp_server is unset (#1489336)
  • Display full attachment name using title attribute when name is too long to display (#1489320)
  • Fix attachment icon issue when rare font/language is used (#1489326)
  • Fix expanded thread root message styling after refreshing messages list (#1489327)
  • Fix issue where From address was removed from Cc and Bcc fields when editing a draft (#1489319)
  • Fix error_reporting directive check (#1489323)
  • Fix de_DE localization of "About" label in Help plugin (#1489325)

New in RoundCube Webmail 1.0 RC (Jan 31, 2014)

  • Small CSS fix with message notice boxes in Larry skin (#1489497)
  • Include groups in contacts search on mail compose (#1489082)
  • Add mime-type mapping for .7z files (#1489512)
  • Invoke update scripts with php to circumvent execution restrictions (#1489322)
  • Fix drag & drop message/contact moving on touch device (#1489431)
  • Fix canned responses in HTML mode (#1489536)
  • Check/create default folders on every login not only the first (#1489423)
  • Update to jQuery-1.11.0 and jQuery-UI-1.9.2
  • Support SMTP socket context options via new config option 'smtp_conn_options'
  • Fix compatibility with PHP 5.2 in html.php file (#1489514)
  • Remove expand/collapse with plus/minus keys (on numeric keypad) (#1489513)
  • Fix issue where filesystem path was added to all-attachments (zip) file (#1489507)
  • Fix case-sensitivity of email addresses handling on compose (#1485499)
  • Don't alter Message-ID of a draft when sending (#1489409)
  • Fix issue where deprecated syntax for HTML lists was not handled properly (#1488768)
  • Display different icons when Trash folder is empty or full (#1485775)
  • Remember last position of more headers switch (#1488323)
  • Fix so message flags modified by another client are applied on the list on refresh (#1485186)
  • Fix broken text/* attachments when forwarding/editing a message (#1489426)
  • Improved minified files handling, added css minification (#1486988)
  • Fix handling of X-Forwarded-For header with multiple addresses (#1489481)
  • Fix border issue on folders list in classic skin (#1489473)
  • Implemented menu actions to copy/move messages, added folder-selector widget (#1484086)
  • Fix security rules in .htaccess preventing access to base URL without the ending slash (#1489477)
  • Fix regression where only first new folder was placed in correct place on the list (#1489472)
  • Fix issue where children of selected and collapsed thread were skipped on various actions (#1489457)
  • Fix issue where groups were not deleted when "Replace entire addressbook" option on contacts import was used (#1489420)
  • Fix unreliable mimetype tests in Installer (#1489453)
  • Fix performance of listing writeable folders (#1489451)

New in RoundCube Webmail 0.9.4 (Sep 6, 2013)

  • Make identities matching case insensitive (#1485480)
  • Fix issue where too big message data was stored in cache causing sql errors (#1489316)
  • Fix iframe scrollbars on webkit desktop browsers (#1489306)
  • Fix issue where legacy config was overriden by default config (#1489288)
  • Fix newmail_notifier issue where favicon wasn't changed back to default (#1489313)
  • Fix setting of Junk and NonJunk? flags by markasjunk plugin (#1489285)
  • Fix lack of Reply-To address in header of forwarded message body (#1489298)
  • Fix bugs when invoking contact creation form when read-only addressbook is selected (#1489296)
  • Fix identity selection on reply (#1489291)
  • Fix so additional headers are added to all messages sent (#1489284)
  • Fix display issue after moving folder in Folder Manager (#1489293)
  • Fix handling of non-default date formats (#1489294)
  • Fix unquoted path in PREG expression on Windows (#1489290)
  • Fix Junk folder icon alignment when it's nested in inbox folder (#1489292)
  • Fix wrong close tag in /template/mail.html (#1489295)

New in RoundCube Webmail 0.9.3 (Aug 23, 2013)

  • Optimized UI behavior for touch devices
  • Fix setting refresh_interval to "Never" in Preferences (#1489286)
  • Fix purge action in folder manager (#1489280)
  • Fix base URL resolving on attribute values with no quotes (#1489275)
  • Fix wrong handling of links with '|' character (#1489276)
  • Fix colorspace issue on image conversion using ImageMagick? (#1489270)
  • Fix XSS vulnerability when saving HTML signatures (#1489251)
  • Fix XSS vulnerability when editing a message "as new" or draft (#1489251)
  • Fix rewrite rule in .htaccess (#1489240)
  • Fix detecting Turkish language in ISO-8859-9 encoding (#1489252)
  • Fix identity-selection using Return-Path headers (#1489241)
  • Fix parsing of links with ... in URL (#1489192)
  • Fix compose priority selector when opening in new window (#1489257)
  • Fix bug where signature wasn't changed on identity selection when editing a draft (#1489229)
  • Fix IMAP SETMETADATA parameters quoting (#1489231)
  • Fix "could not load message" error on valid empty message body (#1489228)
  • Fix handling of message/rfc822 attachments on message forward and edit (#1489214)
  • Fix parsing of square bracket characters in IMAP response strings (#1489223)
  • Don't clear References and in-Reply-To when a message is "edited as new" (#1489216)
  • Fix messages list sorting with THREAD=REFS
  • Remove deprecated (in PHP 5.5) PREG /e modifier usage (#1489174)
  • Fix empty messages list when register_globals is enabled (#1489157)
  • Fix so valid and set date.timezone is not required by installer checks (#1489180)
  • Canonize boolean ini_get() results (#1489189)
  • Fix so install do not fail when one of DB driver checks fails but other drivers exist (#1489178)
  • Fix so exported vCard specifies encoding in v3-compatible format (#1489183)

New in RoundCube Webmail 0.9.2 (Jun 18, 2013)

  • This is the second service release for the 0.9 series.
  • It contains 25 bugfixes and improvements as well as some translation updates.
  • It's considered stable, and updating is recommended.

New in RoundCube Webmail 0.9.1 (May 22, 2013)

  • Better German labels for from/to to avoid conflicts with 'sender' (#1489084)
  • Fix problem where security warning was displayed for valid images with image/jpg type (#1489097)
  • Fix handling of invalid email addresses in headers (#1489092)
  • Fix IMAP connection issue with default_socket_timeout < 0 and imap_timeout < 0 (#1489090)
  • Fix various PHP code bugs found using static analysis (#1489086)
  • Fix backslash character handling on vCard import (#1489085)
  • Fix csv import from Thunderbird with French localization (#1489059)
  • Fix messages list focus issue in Opera and Webkit (#1489058)
  • Fix Reply-To header handling in Reply-All action (#1489037)
  • Fix so Sender: address is added to Cc: field on reply to all (#1489011)
  • Fix so addressbook_search_mode works also for group search (#1489079)
  • Fix removal of a contact from a group in LDAP addressbook (#1489081)
  • Inlcude SQL query in the log on SQL error (#1489064)
  • Fix handling untagged responses in IMAP FETCH - "could not load message" error (#1489074)
  • Fix very small window size in Chrome (#1488931)
  • Fix list page reset when viewing a message in Larry skin (#1489076)
  • Fix min_refresh_interval handling on preferences save (#1489073)
  • Fix PDF support detection for Firefox PDF.js (#1488972)
  • Fix possible collision in generated thumbnail cache key (#1489069)
  • Fix exit code on bootsrap errors in CLI mode (#1489044)
  • Fix error handling in CLI mode, use STDERR and non-empty exit code (#1489043)
  • Fix error when using check_referer=true
  • Fix incorrect handling of some specific links (#1489060)
  • Fix incorrect handling of leading spaces in text wrapping
  • Fix unintentional messages list jumps on click in Internet Explorer (#1489056)
  • Fix list of required configuration options (#1489055)
  • Fix DB error when creating a new contact and a group is selected (#1489051)
  • Fix handling of deprecated boolean value of reply_mode option (#1489052)

New in RoundCube Webmail 0.9.0 (May 7, 2013)

  • Improved rendering of forwarded and attached messages
  • Optionally display and compose email messages a new windows
  • Unified UI for message view and composition
  • Show sender photos from contacts in email view
  • Render thumbnails for image attachments
  • Download all attachments as zip archive (using the zipdownload plugin)
  • Forward multiple emails as attachments
  • CSV import for contacts

New in RoundCube Webmail 0.8.4 (Nov 16, 2012)

  • Fix XSS vulnerability in handling of text/enriched messages (#1488806)
  • Fix handling of 'media' attribute on linked css (#1488789)
  • Fix regression where unintentional page reload was done after request abort (#1488802)
  • Fix excessive LFs at the end of composed message with top_posting=true (#1488797)
  • Fix bug where leading blanks were stripped from quoted lines (#1488795)

New in RoundCube Webmail 0.8.2 (Oct 8, 2012)

  • Fix XSS vulnerability from HTTP User-Agent header (#1488737)
  • Force fonts in compose fields to be all the same (#1488690)
  • Add full headers view in message preview window (#1488538)
  • Fix message display page issues (#1488590, #1488642)
  • Fix handling vCard entries with TEL;TYPE=CELL (#1488728)
  • Fix error where session wasn't updated after folder rename/delete (#1488692)
  • Fix PLAIN authentication for some IMAP servers (#1488674)
  • Fix encoding vCard file when contains PHOTO;ENCODING=b (#1488683)
  • Fix focus issue in IE when selecting message row (#1488620)
  • Fix displaying all headers when they contain malformed characters (#1488666)
  • Fix decoding of HTML messages with UTF-16 charset specified (#1488654)
  • Fix quota capability detection so it can be overwritten by a plugin (#1488655)
  • Fix identity selection on reply (#1488101)
  • Fix Larry's messages list filter in IE (#1488632)
  • Fix more IE issues by disabling Compat. mode with X-UA-Compatible meta tag (#1488626)
  • Fix setting locales under Solaris - use additional .UTF-8 suffix (#1488628)
  • Fix email address validation for addresses with IP address in domain part
  • Fix Larry skin issues in IE7 compat. mode (#1488618)
  • Fix so subscribed non-existing/non-accessible shared folder can be unsubscribed

New in RoundCube Webmail 0.8.1 (Aug 20, 2012)

  • Fix bug where domain name was converted to lower-case even with login_lc=false (#1488593)
  • Fix lower-casing email address on replies (#1488598)
  • Fix line separator in exported messages (#1488603)
  • Fix XSS issue where plain signatures wasn't secured in HTML mode (#1488613)
  • Fix XSS issue where href="javascript:" wasn't secured (#1488613)
  • Fix impossible to create message with empty plain text part (#1488610)
  • Fix stripped apostrophes when replying in plain text to HTML message (#1488606)
  • Fix inactive Save search option after advanced search (#1488607)
  • Fix Remove from group option is active for contact search result (#1488608)
  • Disable autocapitalization in login form on iPad/iPhone (#1488609)
  • Fix focus on the list when list row is clicked (#1488600)
  • Added separate From and To columns apart from smart From/To? column (#1486891)
  • Fix fallback to Larry skin when configured skin isn't available (#1488591)
  • Fix (workaround) delete operations with some versions of memcache (#1488592)
  • Fix (disable) request validation for spell and spell_html actions

New in RoundCube Webmail 0.7.1 (Jan 10, 2012)

  • Fix bug in handling of base href and inline content (#1488290)
  • Fix SQL Error when saving a contact with many email addresses (#1488286)
  • Fix strict email address searching if contact has more than one address
  • Remove duplicated 'organization' label (#1488287)
  • Fix so editor selector is hidden when 'htmleditor' is listed in 'dont_override'
  • Fix wrong (long) label usage (#1488283)
  • Fix handling of INBOX's subfolders in special folders config (#1488279)
  • Add ifModule statement for setting Options -Indexes in .htaccess file (#1488274)
  • Fix searching on IMAP servers without CHARSET specifier support (#1488271)
  • Fix crash with eAccelerator (#1488256)
  • Fix expanding folders during drag&drop (#1488260)
  • Fix wrong postgres sequence name in upgrade from 0.6
  • Fix broken CREATE INDEX queries in SQLite DDL files (#1488255)

New in RoundCube Webmail 0.7 (Dec 14, 2011)

  • Make Roundcube render the Email Standards Project Acid Test correctly
  • Replace prompt() with jQuery UI dialog (#1485135)
  • Fix navigation in messages search results
  • Improved handling of some malformed values encoded with quoted-printable (#1488232)
  • Add possibility to do LDAP bind before searching for bind DN
  • Fix handling of empty tags in HTML messages (#1488225)
  • Add content filter for embedded attachments to protect from XSS on IE (#1487895)
  • Use strpos() instead of strstr() when possible (#1488211)
  • Fix handling HTML entities when converting HTML to text (#1488212)
  • Fix fit_string_to_size() renders browser and ui unresponsive (#1488207)
  • Fix handling of invalid characters in request (#1488124)
  • Fix merging some configuration options in update.sh script (#1485864)
  • Fix so TEXT key will remove all HEADER keys in IMAP SEARCH (#1488208)
  • Fix handling contact photo url with https:// prefix (#1488202)
  • Fix possible infinite redirect on attachment preview (#1488199)
  • Improved clickjacking protection for browsers which don't support X-Frame-Options headers
  • Fixed bug where similiar folder names were highlighted wrong (#1487860)
  • Fixed bug in handling link with '!' character in it (#1488195)
  • Fixed bug where session ID's length was limited to 40 characters (#1488196)
  • TinyMCE security issue: removed moxieplayer (embedding flv and mp4 is not supported anymore)

New in RoundCube Webmail 0.6 (Sep 30, 2011)

  • A full-featured address book with rich contact information:
  • The address book UI was finally extended to store rich contact data including photos. We worked hard to create a flexible and intuitive UI to enter and manage the contact data. Along with that, import and export of vcards was improved to support all the new fields. If you have LDAP directories configured as address sources, you might review the configuration and map the new contact fields to the according LDAP attributes using the 'fieldmap' property.
  • Group support for LDAP address books:
  • While speaking of LDAP, the LDAP wrapper of Roundcube now also supports address groups thanks to the contribution of Andreas Dick. This requires some additional configuration which is described in the comments of config/main.inc.php.dist
  • ACL rights/namespace management plugin:
  • The new package includes a plugin which extends the folder manager to manage Access Control Lists according to RFC4314 and RFC2086. This allows one to share folders with other users if the IMAP server supports ACL. If there's a LDAP directory configured, the ACL manager even does auto-completion when adding a new user.
  • memcache support for session storage:
  • As an alternative to the SQL-based storage of user sessions, Roundcube 0.6 is now capable of using memcache for fast and redundant storage of session data. Set 'session_storage' and 'memcache_hosts' config options to enable it.
  • File uploads with progress display:
  • Using the features of the APC module, Roundcube can now display the progress of file uploads. This has to be enabled in config using the 'upload_progress' option. Make sure APC is available in PHP and that apc.rfc1867 is set in php.ini
  • Automated update process with database schema check:
  • Upgrading Roundcube installations has become an easy task with the new update shell script. Unpack the new package in some directory and then run bin/installto.sh from there. TARGETDIR is the location of the Roundcube installation which you want to upgrade. The script then copies all files to the target directory and does all modifications necessary to get the database and config files up-to-date.
  • Exchange logo by config:
  • And last but not least, one can now set a customized logo by config without the necessity to create a new skin. We'd like to encourage all hosting providers to set the 'skin_logo' config option with an URL to their logo. This will hopefully clarify to your users, what service they're actually using. We registered an increased amount of support requests from users who don't understand that Roundcube is not a public service but that they have to contact their ISP for help.

New in RoundCube Webmail 0.5.2 (Apr 21, 2011)

  • TinyMCE 3.4.2 now compatible with IE9
  • PEAR::Net_SMTP 1.5.2, fixed timeout issue (#1487843)
  • Fix bug where template name without plugin prefix was used in render_page hook
  • Support 'abort' and 'result' response in 'preferences_save' hook, add error handling
  • Fix bug where some content would cause hang on html2text conversion (#1487863)
  • Improve space-stuffing handling in format=flowed messages (#1487861)
  • Fix bug where some dates would produce SQL error in MySQL (#1487856)
  • Added workaround for some IMAP server with broken STATUS response (#1487859)
  • Fix bug where default_charset was not used for text messages (#1487836)
  • Stateless request tokens. No keep-alive necessary on login page (#1487829)
  • Force names of unique constraints in PostgreSQL DDL
  • Add code for prevention from IMAP connection hangs when server closes socket unexpectedly
  • Remove redundant DELETE query (for old session deletion) on login
  • Get around unreliable rand() and mt_rand() in session ID generation (#1486281)
  • Fix some emails are not shown using Cyrus IMAP (#1487820)
  • Fix handling of mime-encoded words with non-integral number of octets in a word (#1487801)
  • Fix parsing links with non-printable characters inside (#1487805)
  • Fixed de_CH/de_DE localization bugs (#1487773)
  • Add variable for 'Today' label in date_today option (#1486120)
  • Applied plugin changes since 0.5-stable release
  • Fix SQL query in rcube_user::query() so it uses index on MySQL again
  • Use only one from IMAP authentication methods to prevent login delays (1487784)
  • Fix strftime format support in date_today option
  • Removed redundant tags from contact add/edit pages
  • Fix CSS error in contact details screen on IE7 (#1487775)

New in RoundCube Webmail 0.5.1 (Feb 15, 2011)

  • Use IMAP's ID extension (RFC2971) to print more info into debug log
  • Security: add optional referer check to prevent CSRF in GET requests
  • Fix email_dns_check setting not used for identities/contacts (#1487740)
  • Fix ICANN example addresses doesn't validate (#1487742)
  • Security: protect login form submission from CSRF
  • Security: prevent from relaying malicious requests through modcss.inc
  • Fix handling of non-image attachments in multipart/related messages (#1487750)
  • Fix IDNA support when IDN/INTL modules are in use (#1487742)
  • Fix handling of invalid HTML comments in messages (#1487759)
  • Fix parsing FETCH response for very long headers (#1487753)
  • Fix add/remove columns in message list when message_sort_order isn't set (#1487751)
  • Check mime headers before attempt to parse them (#1487745)
  • Quote header values in show_additional_headers plugin (#1487744)
  • Fix settings UI on IE 6 (#1487724)
  • Remove double borders in folder listing (#1487713)
  • Separate full message headers UI element from headers table (#1487715)
  • Add part MIME ID to message_part_* hooks (#1487718)
  • Improve parsing of MS Outlook vCards (#1487716)
  • Updated PEAR::Net_Socket to 1.0.10
  • Updated PEAR::Net_IDNA2 to 0.1.1
  • Fix handling of comments inside an email address spec. (#1487673)
  • Show full mail subject as title when hovering a cut subject link (#1487128)
  • Fix randomly disappearing folders list in IE (#1487704)
  • Fix list column add/removal in IE (#1487703)
  • Fix login redirect issues (#1487686)
  • Require PHP 5.2.1 or greater
  • Fix %h/%z variables in username_domain option (#1487701)
  • Workaround for setting charset in case of malformed bodystructure response (#1487700)
  • Fix impossible to subscribe to protected folders (#1487656)
  • Fix setting timezone in Preferences (#1487705)

New in RoundCube Webmail 0.5 (Jan 19, 2011)

  • Fix double-login/session issue (#1487104)
  • Wrap HTML parts with and add Doctype declaration (#1487098)
  • Make rcube_autoload silently skip unknown classes (#1487109)
  • Fix charset detection in vcards with encoded values (#1485542)
  • Better CSS cursors for splitters (#1486874)
  • Show the same message only once (#1487641)
  • Fix namespaces handling (#1487649)
  • Add handling of multifolder METADATA/ANNOTATION responses
  • Fix handling of INBOX when personal namespace prefix is non-empty (#1487657)
  • Fix handling square brackets in links (#1487672)
  • Add description of 'use_https' option in main.inc.php.dist file

New in RoundCube Webmail 0.4 (Aug 17, 2010)

  • Fix disapearing upload form disapears when user selects a file on Safari (#1486823)
  • Don't replace error messages with loading info (#1486300)
  • Fix JS errors on compose mode switch (#1486870)
  • Fix message structure parsing when it lacks optional fields (#1486881)
  • Include all recipients in sendmail log
  • Support HTTP_X_FORWARDED_PROTO header for HTTPS detecting (#1486866)
  • Fix default IMAP port configuration (#1486864)
  • Create Sent folder when starting to compose a new message (#1486802)
  • Fix handling of messages with Content-Type: application/* and no filename (#1484050)
  • Improved compose screen: resizable body and attachments list, vertical splitter, options menu
  • Fix RC forgets search results (#1483883)
  • TinyMCE 3.3.7
  • Improve parsing of styled empty tags in HTML messages (#1486812)
  • Add � variable support in base_dn/bind_dn config (#1486779)
  • Add button to hide/unhide the preview pane (#1484215)
  • Fix no-cache headers on https to prevent content caching by proxies (#1486798)
  • Fix attachment filenames broken with TNEF decoder using long filenames (#1486795)
  • Use user's timezone in Date header, not server's timezone (#1486119)
  • Add option to set separate footer for HTML messages (#1486660)
  • Add real SMTP error description to displayed error messages (#1485927)
  • Fix some IMAP errors handling when opening the message (#1485443)
  • Fix related parts aren't displayed when got mimetype other than image/* (#1486432)
  • Multiple identity and database support for squirrelmail_usercopy plugin (#1486517)
  • Support dynamic hostname (%d/%n) variables in configuration options (#1485438)
  • Add 'messages_list' hook (#1486266)
  • Add request* event triggers in http_post/http_request (#1486054)
  • Fix use RFC-compliant line-delimiter when saving messages on IMAP (#1486712)
  • Add 'imap_timeout' option (#1486760)
  • Fix forwarding of messages with winmail attachments
  • Fix handling of uuencoded attachments in message body (#1485839)
  • Added list_mailboxes hook in rcube_imap::list_unsubscribed() (#1486668)
  • Fix wrong message on file upload error (#1486725)
  • Add support for data URI scheme [RFC2397] (#1486740)
  • Added 'actionbefore', 'actionafter', 'responsebefore', 'responseafter' events
  • Fix double-addition of e-mail domain to content ID in HTML images
  • Read and send messages with format=flowed (#1484370), fixes word wrapping issues (#1486543)
  • Fix duplicated attachments when forwarding a message (#1486487)
  • Fix message/rfc822 attachments containing only attachments are not parsed properly (#1486743)
  • Fix character in winmail.dat attachments names (#1486738)
  • Fix handling errors of folder deletion (#1486705)
  • Parse untagged CAPABILITY response for LOGIN command (#1486742)
  • Renamed all php-cli scripts to use .sh extension
  • Some files from /bin + spellchecking actions moved to the new 'utils' task
  • Added thread tree icons
  • Extend contact groups support (#1486682)
  • Fix check-recent action issues and performance (#1486526)
  • Fix messages order after checking for recent (#1484664)
  • Fix autocomplete shows entries without email (#1486452)
  • Fix listupdate event doesn't trigger on search response (#1486708)
  • Fix select_all_mode value after selecting a message (#1486720)
  • Set focus to editor on reply in HTML mode (#1486632)
  • Fix composing in HTML jumps cursor to body instead of recipients (#1486674)
  • Allow columns order change per user - drag&drop (#1485795)
  • Add References header in read receipt (#1486681)
  • Fix database constraint violation when opening a message (#1486696)
  • Add 'loading' message while login is in progress (#1486667)
  • Fix quota_zero_as_unlimited (#1486662)
  • Fix folder subscription checking (#1486684)
  • Fix INBOX appears (sometimes) twice in mailbox list (#1486672)
  • Fix listing of attachments of some types e.g. "x-epoc/x-sisx-app" (#1486653)
  • Fix DB Schema checking when some db_table_* options are not set (#1486654)

New in RoundCube Webmail 0.3 Beta (May 18, 2009)

  • Using jQuery for client scripting
  • Implemented Plugin API (#1326399)
  • Moved some core functionality (temp file storage) into plugins
  • Fix Answered/Forwarded flag setting for messages in subfolders
  • Fix autocomplete problem with capital letters (#1485792)
  • Support UUencode content encoding (#1485839)
  • Minimize chance of race condition in session handling (#1485659, #1484678)
  • Fix session handling on non-session SQL query error (#1485734)
  • Fix html editor mode setting when reopening draft message (#1485834)
  • Added quick search box menu (#1484304)
  • Fix wrong column sort order icons (#1485823)
  • Updated TinyMCE to 3.2.3 version
  • Fix attachment names encoding when charset isn't specified in attachment part (#1484969)
  • Fix message normal priority problem (#1485820)
  • Fix autocomplete spinning wheel does not disappear (#1485804)
  • Added log_date_format option (#1485709)
  • Fix text wrapping in HTML editor after switching from plain text to HTML (#1485521)
  • Fix auto-complete function hangs with plus sign (#1485815)
  • Fix AJAX requests errors handler (#1485000)
  • Fix read/write database recognition (#1485811)
  • Added possibility to encrypt received header, option 'http_received_header_encrypt', added some more logic in encrypt/decrypt functions for security

New in RoundCube Webmail 0.2.2 (May 18, 2009)

  • Fix quicksearchbox look in Chrome and Konqueror (#1484841)
  • Fix UTF-8 byte-order mark removing (#1485514)
  • Fix folders subscribtions on Konqueror (#1484841)
  • Fix debug console on Konqueror and Safari
  • Fix messagelist focus issue when modifying status of selected messages (#1485807)
  • Support STARTTLS in IMAP connection (#1485284)
  • Fix DEL key problem in search boxes (#1485528)
  • Support several e-mail addresses per user from virtuser_file (#1485678)
  • Fix drag&drop with scrolling on IE (#1485786)
  • Fix adding signature separator in html mode (#1485350)
  • Fix opening attachment marks message as read (#1485803)
  • Fix 'temp_dir' does not support relative path under Windows (#1484529)
  • Fix "Initialize Database" button missing from installer (#1485802)
  • Fix compose window doesn't fit 1024x768 window (#1485396)
  • Fix service not available error when pressing back from compose dialog (#1485552)
  • Fix using mail() on Windows (#1485779)
  • Fix word wrapping in message-part's < PRE >s for printing (#1485787)
  • Fix incorrect word wrapping in outgoing plaintext multibyte messages (#1485714)
  • Fix double footer in HTML message with embedded images
  • Fix TNEF implementation bug (#1485773)
  • Fix incorrect row id parsing for LDAP contacts list (#1485784)
  • Fix 'mode' parameter in sqlite DSN (#1485772)

New in RoundCube Webmail 0.2.1 (Mar 10, 2009)

  • Use US-ASCII as failover when Unicode searching fails (#1485762)
  • Fix errors handling in IMAP command continuations (#1485762)
  • Fix FETCH result parsing for servers returning flags at the end of result (#1485763)
  • Fix datetime columns defaults in mysql's DDL (#1485641)
  • Fix attaching more than nine inline images (#1485759)
  • Support 'UNICODE-1-1-UTF-7' alias for UTF-7 encoding (#1485758)
  • Fix mime-type detection using a hard-coded map (#1485311)
  • Don't return empty string if charset conversion failed (#1485757)
  • Disable concurrent autocomplete query results display (#1485743)
  • Fix new lines stripped from message footer (#1485751)
  • Fix IE problem with mouse click autocomplete (#1485739)
  • Fix html body washing on reply/forward + fix attachments handling (#1485676)
  • Fix multiple recipients input parsing (#1485733)
  • Fix replying to message with html attachment (#1485676)
  • Use default_charset for messages without specified charset (#1485661, #1484961)
  • Support non-standard "GMT-XXXX" literal in date header (#1485729)
  • Added TNEF support to decode MS Outlook attachments (winmail.dat)
  • Fix "value continuation" MIME headers by adding required semicolon (#1485727)
  • Fix pressing select all/unread multiple times (#1485723)
  • Fix selecting all unread does not honor new messages (#1485724)
  • Fix some base64 encoded attachments handling (#1485725)
  • Support NGINX as IMAP backend: better BAD response handling (#1485720)
  • Performance fix: don't fetch attachment parts headers twice to parse filename
  • Fix checking for recent messages on various IMAP servers (#1485702)
  • Performance fix: Don't fetch quota and recent messages in "message view" mode
  • Fix displaying of alternative-inside-alternative messages (#1485713)
  • Fix MDNSent flag checking, use arbitrary keywords (asterisk) flag (#1485706)
  • Fix creation of folders with '&' sign in name
  • Fix parsing of email addresses without angle brackets (#1485693)
  • Save spellcheck corrections when switching from plain to html editor (and spellchecking is on)
  • Fix large search results on server without SORT capability (#1485668)
  • Get rid of preg_replace() with eval modifier and create_function usage (#1485686)
  • Bring back < base > and < link > tags in HTML messages
  • Fix XSS vulnerability through background attributes as reported by Julien Cayssol
  • Fix problems with backslash as IMAP hierarchy delimiter (#1484467)
  • Secure vcard export by getting rid of preg's 'e' modifier use (#1485689)
  • Fix authentication when submitting form with existing session (#1485679)
  • Allow absolute URLs to images in HTML messages/sigs (#1485666)
  • Fix message body which contains both inline attachments and emotions
  • Fix SQL query execution errors handling in rcube_mdb2 class (#1485509)
  • Fix address names with '@' sign handling (#1485654)
  • Improve messages display performance
  • Fix messages searching with 'to:' modifier

New in RoundCube Webmail 0.2 (Dec 31, 2008)

  • Major bugfixes.

New in RoundCube Webmail 0.1.1 / 0.2 Beta (Sep 22, 2008)

  • Major bugfixes.