Roundcube Webmail 1.1.4

This is a security update to the stable version 1.1. It contains some important bug fixes one of which seals a potential path traversal vulnerability recently reported by High-Tech Bridge Security Research Lab. A second security improvement adds some measures against brute-force attacks.

See the complete Changelog on trac.roundcube.net and download the complete package with all dependencies included from roundcube.net.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating!

Roundcube Webmail 1.0.8

This is a security update to the stable version 1.0. It contains some important bug fixes we back-ported from the 1.1.x series into the long term support branch of Roundcube. One of which fixes a potential path traversal vulnerability reported by High-Tech Bridge Security Research Lab.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup before updating!

Roundcube Webmail 1.2-beta

This is a beta release of the next major version 1.2 of Roundcube webmail. With this milestone we introduce new features primarily focusing on security and PGP encryption:

• PHP7 compatibility
• PGP encryption via Mailvelope (browser) or the Enigma plugin (server-side)
• Drag-n-drop attachments from mail preview to compose window
• Mail messages searching with predefined date interval
• Improved security measures to protect from brute-force attacks

And of course plenty of small improvements and bug fixes.

The PGP encryption support with the Mailvelope browser plugin comes out of the box and is enabled if the Mailvelope API is detected in a user's browser. See the Mailvelope documentation how to enable it for your site.

In order to activate server-side PGP encryption for all your users, the enigma plugin, which is shipped with this package, has to be enabled in the Roundcube config. See the plugin's README for details.

IMPORTANT: with this version, we finally deprecate some old Roundcube library functions. Please test your plugins thoroughly and look for deprecation warnings in the logs.

See the complete Changelog on trac.roundcube.net and download the new packages from roundcube.net.

Please note that this is a beta release and we recommend to test it on a separate environment. And don't forget to backup your data before installing it.

Roundcube Webmail 1.1.3

This is the third service release to update the stable version 1.1. It contains mostly minor bug fixes and updates of some 3rd party components such as jQuery and TinyMCE. A detailed list of changes is listed in our wiki.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating!

Roundcube Webmail 1.0.7

This is a service update to the stable version 1.0. It mainly contains bug fixes and compatibility updates with 3rd party libs we backported from the 1.1.x series into the long term support branch of Roundcube.

It's considered stable and we recommend to update all productive 1.0.x installations of Roundcube with this version. Please do backup before updating!

Roundcube Webmail 1.1.2

This is the second service release to update the stable version 1.1. It contains some bug fixes, three amongst them are security improvements. Then we added consistency checks to the memcache and apc caching backends to increase their reliability as well as some other overall improvements. A detailed list of changes is listed in our wiki.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating!

Roundcube Webmail 1.0.6

This is a security update to the stable version 1.0. Besides two security improvements, it mainly contains bug fixes we back-ported from the 1.1.x series and which we found important for the long term support branch of Roundcube. See the full changelog in our wiki

It's considered stable and we recommend to update all productive installations of Roundcube 1.0.x with this version. Please do backup before updating!

Roundcube Webmail 1.1.1

This is the first service release to update the stable version 1.1. It contains some important bug fixes and improvements in error handling as well as a few new features and configuration options. See the full changelog in our wiki.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating!

Roundcube Webmail 1.1.0

This is the next major version 1.1 of Roundcube webmail. With this milestone we introduce new features since version 1.0 as well as some clean-up with the 3rd party libraries:

• Allow searching across multiple folders
• Improved support for screen readers and assistive technology
  using WCAG 2.0 and WAI ARIA standards
• Update to TinyMCE 4.1 to support images in HTML signatures (copy & paste)
• Added namespace filter and folder searching in folder manager
• New config option to disable UI elements/actions
• Stronger password encryption using OpenSSL
• Support for the IMAP SPECIAL-USE extension
• Support for Oracle as database backend
• Manage 3rd party libs with Composer

And of course plenty of small improvements and bug fixes.

In addition to that, we added a new features to improve protection against possible but yet unknown CSRF attacks - thanks to the help of Kolab Systems who supplied the concept and development resources for this.

Read the full list of changes here: trac.roundcube.net/wiki/Changelog

IMPORTANT: with the 1.1.x series, we drop support for PHP < 5.3.7 and Internet Explorer < 9. IE7/IE8 support can be restored by enabling the legacy_browser plugin.

Roundcube Webmail 1.0.5

This is a security update to the stable version 1.0. Beside a recently reported Cross-Site-Scripting vulnerability, it also contains some bug fixes and improvements we found important for the long term support branch of Roundcube.

See the full changelog in our wiki.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup before updating!