The Roundcube project news
We proudly announce the first service release for the 0.9 series of Roundcube. As usual, it contains
some bug fixes and improvements which didn't make it into the first stable version as well as some translation updates. After getting reports that some skin images weren't reloaded due to progressive cache settings, the packaged version now comes with unique urls of skin images referenced by templates and CSS files.
We proudly announce the next stable release of Roundcube. This version enhances the webmail experience with these new features:
* Improved rendering of forwarded and attached messages
* Optionally display and compose email messages a new windows
* Unified UI for message view and composition
* Show sender photos from contacts in email view
* Render thumbnails for image attachments
* Download all attachments as zip archive (using the zipdownload plugin)
* Forward multiple emails as attachments
* CSV import for contacts
The major change of this version isn't really visible to the users but even more important for the developers: the Roundcube framework. We decoupled the core functions for IMAP access, SMTP email sending, database abstraction, caching, etc. from the webmail application in order to make them usable for other free software products.
Another major change since the 0.8 series is the new database abstraction layer. In order to add support for SQLite3, the PEAR:MDB2 dependency was dropped and Roundcube now uses the native PHP Data Objects (PDO). It's enabled by default since PHP 5.1 and is considered stable and well-developed. One drawback, however, is a small lack in the MySQL PDO driver which makes PHP 5.3 a requirement for this version of Roundcube when using the MySQL database.
After lots of testing and collecting your feedback, this version is considered stable and it also includes the recently discovered vulnerability that allows an attacker to modify its users preferences in a way that he can then read arbitrary files from the server. We therefore recommend to update all productive installations of Roundcube.
P.S. Starting with version 0.9.0, there's now professional service and support available for Roundcube. See https://kolabsys.com/news/roundcube-services-and-support-roundcubes-lead-developers
We just published new releases which fix a recently reported vulnerability that allows an attacker to access files on the server. Please update your installations with the new versions or patch them with the fix which is also published in the downloads section or our sourceforge.net page.
Download the latest version from http://roundcube.net/download
In order to find out whether one of your users has vulnerable preferences, you can run the following query on the Roundcube user database:
SELECT * FROM users WHERE preferences LIKE '%generic_message_footer%'
If this returns any results, you should block that user because he or she most likely tried to exploit your system.
And here's some background about the vulnerability: http://lists.roundcube.net/pipermail/dev/2013-March/022328.html
We just published the feature-complete release candidate for the upcoming version 0.9. After adding some neat new features in 0.9-beta we now stabilized the code for the final release.
Download it from http://roundcube.net/download and please report remaining bugs to our bug tracker.
Today we can announce another release of the Roundcube webmail package. This is a service update to the stable 0.8 version. It contains small bug fixes and improvements as well as fixes for a recently reported XSS vulnerability. See the CHANGELOG file for details.
We consider it stable and we recommend to update all existing Roundcube installation with this release. Download it from http://roundcube.net/download
We're proud to announce this beta release of the next major version 0.9. With this milestone we introduce some important changes under the hood as well as some nice and long-awaited features:
* First of all, the Roundcube Framework. The core classes providing the strong base of Roundcube's functionality have been extracted and decoupled into a Framework package. They can be used individually in other open source projects looking for solid functionality around IMAP, SMTP, MIME-handling and more.
* Another major change is the new database abstraction. In order to add support for SQLite3 the PEAR:MDB2 dependency was dropped and Roundcube now uses the native PHP Data Objects (PDO). ATTENTION: due a small lack in the MySQL PDO driver this version of Roundcube requires PHP 5.3 when using the MySQL database.
* Then we also added some new features:
- Download all attachments as zip archive (zip module required)
- Render thumbnails for image attachments (imagemagick is recommended)
- Compose and mail view in new windows (configurable in user settings)
- Upload attachment files and contact photos with drag & drop
- Forward multiple emails as attachments
- Show contact photos in mail view
- CSV import for contacts
And of course plenty of small improvements and bug fixes.
See the complete Changelog at http://trac.roundcube.net/wiki/Changelog and download the new packages from http://roundcube.net/download. Please note that this is a beta release and we recommend to test it on a separate environment.
I'd like to inform you that we now decided to switch from launchpad to Transifex to maintain the translations for Roundcube. You can find Roundcube on Transifex.com at https://www.transifex.com/projects/p/roundcube-webmail.
For quality reasons it is set to limited access which means that translators have to apply to become a member of a translation team before they can actually start translating. So if you're interested in becoming a member for a certain language team, choose the language from the list and then click on "Join team" on the upper right part of the overview page.
We kindly invite everybody to help us to keeping the Roundcube localizations up-to-date.
Latest posts from the Roundcube Inbox blog
Today I’d like to share a success story of a picture perfect project collaboration as it only happens in the open source world without any commercial, political or geographical borders. It all started back in 2009 when we attracted the attention of the Kolab Groupware project which was in desperate need of a better web client to access all the groupware data from anywhere. Although Roundcube was “just” an email client, the Kolab guys saw great potential in our codebase and the vital community around it. And now, more than three years after, we can all witness the great success of this decision. read more
We recently moved our svn repository to git hosted at github. Now I'd like to share my experience doing that migration and explain the steps we took to do so. I pretty much followed the process described by John Goulah in his blogpost. So here are the concrete steps I took: 1. Download the entire [...] read more
We're very happy to give you a first preview of the all new skin for Roundcube webmail. It was created by FLINT, the very talented graphic designer who already designed our website. He worked hundreds of hours for free just to make Roundcube the best-looking webmail software on the planet. And the results are overwhelming: [...] read more
So nice... we really appreciate messages like that. read more