Roundcube Webmail 1.0.6

This is a security update to the stable version 1.0. Besides two security improvements, it mainly contains bug fixes we back-ported from the 1.1.x series and which we found important for the long term support branch of Roundcube. See the full changelog in our wiki

It's considered stable and we recommend to update all productive installations of Roundcube 1.0.x with this version. Please do backup before updating!

Roundcube Webmail 1.1.1

This is the first service release to update the stable version 1.1. It contains some important bug fixes and improvements in error handling as well as a few new features and configuration options. See the full changelog in our wiki.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating!

Roundcube Webmail 1.1.0

This is the next major version 1.1 of Roundcube webmail. With this milestone we introduce new features since version 1.0 as well as some clean-up with the 3rd party libraries:

• Allow searching across multiple folders
• Improved support for screen readers and assistive technology
  using WCAG 2.0 and WAI ARIA standards
• Update to TinyMCE 4.1 to support images in HTML signatures (copy & paste)
• Added namespace filter and folder searching in folder manager
• New config option to disable UI elements/actions
• Stronger password encryption using OpenSSL
• Support for the IMAP SPECIAL-USE extension
• Support for Oracle as database backend
• Manage 3rd party libs with Composer

And of course plenty of small improvements and bug fixes.

In addition to that, we added a new features to improve protection against possible but yet unknown CSRF attacks - thanks to the help of Kolab Systems who supplied the concept and development resources for this.

Read the full list of changes here: trac.roundcube.net/wiki/Changelog

IMPORTANT: with the 1.1.x series, we drop support for PHP < 5.3.7 and Internet Explorer < 9. IE7/IE8 support can be restored by enabling the legacy_browser plugin.

Roundcube Webmail 1.0.5

This is a security update to the stable version 1.0. Beside a recently reported Cross-Site-Scripting vulnerability, it also contains some bug fixes and improvements we found important for the long term support branch of Roundcube.

See the full changelog in our wiki.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup before updating!

Roundcube Webmail 1.1-RC

This is the feature-complete version for the upcoming 1.1 stable release for final testing. We just added some new features to improve protection against CSRF attacks together with some more bug fixes.

The new security features are yet experimental and disabled by default. For testing, look into the config options use_secure_urls, assets_url and assets_dir described in the default config file.

See the full changelog here.

We recommend to run it on a separate environment and report remaining bugs to our bug tracker.

Roundcube Webmail 1.0.4

This is the 4th service release to update the stable version 1.0. It contains a security fix along with some bug fixes and improvements we found important for the long term support branch of Roundcube. The most important ones are:

• Security: Fix possible CSRF attacks to some address book operations
  as well as to the ACL and Managesieve plugins.
• Fix attachments encoded in TNEF containers (from Outlook)
• Fix compatibility with PHP 5.2

See the full changelog here.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup before updating!

Roundcube webmail 1.1-beta

This is a beta release of the next major version 1.1 of Roundcube webmail.
With this milestone we introduce a bunch of new features and some clean-up
with the 3rd party libraries Roundcube uses:

• Allow searching across multiple folders
• Improved support for screen readers and assistive technology using
  WCAG 2.0 and WAI ARIA standards
• Support images in HTML signatures (copy & paste)
• Added namespace filter and folder searching in folder manager
• New config option to disable UI elements/actions
• Stronger password encryption using OpenSSL
• Support for the IMAP SPECIAL-USE extension
• Support for Oracle databases
• Moved 3rd party libs to vendor directory, managed by Composer

And of course plenty of small improvements and bug fixes.

IMPORTANT: with this version, we dropped support for PHP < 5.3.7 and
Internet Explorer < 9. IE7/IE8 support can be restored by enabling the
legacy_browser plugin.

Roundcube Webmail 1.0.3

This is the 3rd service release to update the stable version 1.0. It contains some bug fixes and improvements we considered important for the long term support branch of Roundcube. See the full changelog here.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup before updating!

Roundcube Webmail 1.0.2

This is the second service release to update the stable version 1.0. It contains some bug fixes and improvements we considered important for the long term support branch of Roundcube. See the full changelog here.

It's considered stable and we recommend to update all productive installations
of Roundcube with this version. Please do backup before updating!

Roundcube Webmail 1.0.1

This is the first service release to update the stable version 1.0. It contains
some important bug fixes and improvements, mainly a fix for the unintentional
redirect from the compose page in Google Chrome which started to happen after
a recent Chrome update. See the full changelog here.

It's considered stable and we recommend to update all productive installations
of Roundcube with this version. Please note that the update includes a small
database schema change so make sure you run the update script.