The Roundcube Project News

29 April 2018

Updates 1.2.9 and 1.1.12 released

As a follow-up to the recent security update for the stable versions 1.2. and 1.1, this new release fixes a regression that sneaked in with the IMAP command injection protection which unintentionally disabled actions that operate on all selected messages (e.g. mark all as junk).

17 April 2018

Security updates 1.2.8 and 1.1.11 released

Following the recent security update for 1.3, here now come the promised updates for the LTS versions 1.2 and 1.1. They both fix the recently reported vulnerability allowing IMAP command injection via a GET parameters. More details about this are published under CVE-2018-9846.

11 April 2018

Security update 1.3.6 released

We just published a security update to the stable version 1.3. It primarily fixes a recently discovered IMAP command injection vulnerability caused by insufficient input validation within the archive plugin. Details about the vulnerability are published under CVE-2018-9846.

15 March 2018

Update 1.3.5 released

We proudly announce a new service release to update the stable version 1.3. It contains fixes to several bugs backported from the master branch. One can be called a minor security fix as it fixes blocking of remote content on specially crafted style tags.

14 January 2018

Update 1.3.4 released

We proudly announce the next service release to update the stable version 1.3. It contains fixes to several bugs reported by our dear community members and makes Roundcube fully compatible with PHP 7.2.

08 November 2017

Security updates 1.3.3, 1.2.7 and 1.1.10 released

We just published updates to all stable versions from 1.1.x onwards delivering fixes for a recently discovered file disclosure vulnerability in Roundcube Webmail.


Older posts

Want more?

Latest posts from the planet Roundcube blogs

11 April 2018

Elastic: Calendar

40KB of css code later I present to you the Calendar plugin.  read more

28 January 2018

Elastic: Image tools and more

Here’s a short review of recent changes in the Elastic skin.  read more

23 November 2017

Elastic: Core functionality covered

Still in a need of a graphic designer! I’m finishing work on core functionality for the new Roundcube theme.  read more

23 September 2017


It’s not a secret that I’m working on a new Roundcube theme. It’s supposed to provide a responsive interface for desktop, tables and phones.  read more

20 April 2017

Recipient input widget

It is more user friendly and usable especially on mobile to handle recipient addresses as boxes.  read more

27 December 2016

Sieve raw editor

Thanks to great CodeMirror editor and its built-in syntax highlighter we now have a nice editor widget for Sieve scripts.  read more

16 December 2016

Sending contacts as vCards

There’s a lot about vCards in Roundcube. No surprise, this is simple and established open standard.  read more