|
|
|
Posted
3 days
ago
by
Thomas Bruederli
We're proud to announce the second service release for the 0.9 series of Roundcube. It contains 25 bug fixes and improvements as well as some translation updates. It's considered stable and we recommend to update all productive installations
... [More]
of Roundcube with this version. Download it from http://roundcube.net/download, see the full changelog here. [Less]
|
|
Posted
about 1 month
ago
by
Thomas Bruederli
We proudly announce the first service release for the 0.9 series of Roundcube. As usual, it contains some bug fixes and improvements which didn't make it into the first stable version as well as some translation updates. After getting reports
... [More]
that some skin images weren't reloaded due to progressive cache settings, the packaged version now comes with unique urls of skin images referenced by templates and CSS files.
It's considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from http://roundcube.net/download, see the full changelog here. [Less]
|
|
Posted
2 months
ago
by
Thomas Bruederli
We proudly announce the next stable release of Roundcube. This version enhances the webmail experience with these new features: * Improved rendering of forwarded and attached messages * Optionally display and compose email messages a new
... [More]
windows
* Unified UI for message view and composition
* Show sender photos from contacts in email view
* Render thumbnails for image attachments
* Download all attachments as zip archive (using the zipdownload plugin)
* Forward multiple emails as attachments
* CSV import for contacts
The major change of this version isn't really visible to the users but even more important for the developers: the Roundcube framework. We decoupled the core functions for IMAP access, SMTP email sending, database abstraction, caching, etc. from the webmail application in order to make them usable for other free software products.
Another major change since the 0.8 series is the new database abstraction layer. In order to add support for SQLite3, the PEAR:MDB2 dependency was dropped and Roundcube now uses the native PHP Data Objects (PDO). It's enabled by default since PHP 5.1 and is considered stable and well-developed. One drawback, however, is a small lack in the MySQL PDO driver which makes PHP 5.3 a requirement for this version of Roundcube when using the MySQL database.
After lots of testing and collecting your feedback, this version is considered stable and it also includes the recently discovered vulnerability that allows an attacker to modify its users preferences in a way that he can then read arbitrary files from the server. We therefore recommend to update all productive installations of Roundcube.
Download both the webmail and the framework packages from http://roundcube.net/download
Read the full list of changes here: http://trac.roundcube.net/wiki/Changelog
P.S. Starting with version 0.9.0, there's now professional service and support available for Roundcube. See https://kolabsys.com/news/roundcube-services-and-support-roundcubes-lead-developers [Less]
|
|
Posted
2 months
ago
by
round...@users.sourceforge.net (Thomas Bruederli)
We proudly announce the next stable release of Roundcube. This version enhances the webmail experience with these new features:
* Improved rendering of forwarded and attached messages
|
|
Posted
2 months
ago
by
Thomas Bruederli
We proudly announce the next stable release of Roundcube. This version enhances the webmail experience with these new features: * Improved rendering of forwarded and attached messages * Optionally display and compose email messages a new
... [More]
windows
* Unified UI for message view and composition
* Show sender photos from contacts in email view
* Render thumbnails for image attachments
* Download all attachments as zip archive (using the zipdownload plugin)
* Forward multiple emails as attachments
* CSV import for contacts
The major change of this version isn't really visible to the users but even more important for the developers: the Roundcube framework. We decoupled the core functions for IMAP access, SMTP email sending, database abstraction, caching, etc. from the webmail application in order to make them usable for other free software products.
Another major change since the 0.8 series is the new database abstraction layer. In order to add support for SQLite3, the PEAR:MDB2 dependency was dropped and Roundcube now uses the native PHP Data Objects (PDO). It's enabled by default since PHP 5.1 and is considered stable and well-developed. One drawback, however, is a small lack in the MySQL PDO driver which makes PHP 5.3 a requirement for this version of Roundcube when using the MySQL database.
After lots of testing and collecting your feedback, this version is considered stable and it also includes the recently discovered vulnerability that allows an attacker to modify its users preferences in a way that he can then read arbitrary files from the server. We therefore recommend to update all productive installations of Roundcube.
Download both the webmail and the framework packages from http://roundcube.net/download
Read the full list of changes here: http://trac.roundcube.net/wiki/Changelog
P.S. Starting with version 0.9.0, there's now professional service and support available for Roundcube. See https://kolabsys.com/news/roundcube-services-and-support-roundcubes-lead-developers [Less]
|
|
Posted
3 months
ago
by
round...@users.sourceforge.net (Thomas Bruederli)
We just published new releases which fix a recently reported vulnerability that allows an attacker to access files on the server. Please update your installations with the new versions or patch them with the fix which is also published in the downloads section or our sourceforge.net page.
|
|
Posted
3 months
ago
by
Thomas Bruederli
We just published new releases which fix a recently reported vulnerability that allows an attacker to access files on the server. Please update your installations with the new versions or patch them with the fix which is also published in the
... [More]
downloads section or our sourceforge.net page.
Download the latest version from http://roundcube.net/download
Patch for 0.9.x: http://ow.ly/jtQD0
Patch for 0.8.x: http://ow.ly/jtQHM
Patch for 0.7.x: http://ow.ly/jtQK0
Patch for 0.6: http://ow.ly/jtQNd
In order to find out whether one of your users has vulnerable preferences, you can run the following query on the Roundcube user database:
SELECT * FROM users WHERE preferences LIKE '%generic_message_footer%'
If this returns any results, you should block that user because he or she most likely tried to exploit your system.
And here's some background about the vulnerability: http://lists.roundcube.net/pipermail/dev/2013-March/022328.html [Less]
|
|
Posted
3 months
ago
by
Thomas Bruederli
We just published new releases which fix a recently reported vulnerability that allows an attacker to access files on the server. Please update your installations with the new versions or patch them with the fix which is also published in the
... [More]
downloads section or our sourceforge.net page.
Download the latest version from http://roundcube.net/download
Patch for 0.9.x: http://ow.ly/jtQD0
Patch for 0.8.x: http://ow.ly/jtQHM
Patch for 0.7.x: http://ow.ly/jtQK0
Patch for 0.6: http://ow.ly/jtQNd
In order to find out whether one of your users has vulnerable preferences, you can run the following query on the Roundcube user database:
SELECT * FROM users WHERE preferences LIKE '%generic_message_footer%'
If this returns any results, you should block that user because he or she most likely tried to exploit your system.
And here's some background about the vulnerability: http://lists.roundcube.net/pipermail/dev/2013-March/022328.html [Less]
|
|
Posted
4 months
ago
by
round...@users.sourceforge.net (Thomas Bruederli)
We just published the feature-complete release candidate for the upcoming version 0.9. After adding some neat new features in 0.9-beta we now stabilized the code for the final release.
Download it from http://roundcube.net/download and please report remaining bugs to our bug tracker.
|
|
Posted
4 months
ago
by
Thomas Bruederli
We just published the feature-complete release candidate for the upcoming version 0.9. After adding some neat new features in 0.9-beta we now stabilized the code for the final release.
Download it from http://roundcube.net/download and please report remaining bugs to our bug tracker.
|
Copyright
©
2013
Black Duck Software, Inc.
and its contributors, Some Rights Reserved. Unless otherwise marked, this work is licensed under a
Creative Commons Attribution 3.0 Unported License
. Ohloh
®
and the Ohloh logo are trademarks of
Black Duck Software, Inc.
in the United States and/or other jurisdictions. All other trademarks are the property of their respective holders.