The Roundcube Project News

This service release includes more than 40 bug fixes, security improvements and completes some missing translations. We also added TNEF support to decode proprietary MS Outlook attachments (winmail.dat) and tuned the performance when displaying a message.

The second stable version of the RoundCube Webmail package completes unfinished work from the 0.2-beta release and comes up with about 80 bugfixes as well as some performance improvements. The upgrading process now became very easy with the integrated update script. It’s runnable from the shell or from within the web-based installer. Read the UPGRADING instructions for details.

There were two security issues reported which are now fixed. The first was as possible code injection using the html2text conversion script. The other exploit used the unchecked size parameters of the quota image to let PHP create huge images eating up all the server memory.

This new version comes with many fixed bugs and some new features like

After getting several requests about donations for our project we decided to open a PayPal account for this purpose. But donations to RoundCube Webmail will be passed to charity projects, mainly the KANTHA BOPHA Children’s Hospital in Cambodia.

This pre-release of version 0.2 comes up with a DOM-based HTML sanitization which removes malicious JavaScript code from HTML messages and fixes all known XSS vulnerabilities. And we also fixed more than 100 bugs.

The first service update for RoundCube Webmail 0.1-stable is now available. It contains important bug fixes and updates of some incomplete localization files. We recommend to update all installations of 0.1-stable. Read the UPGRADING instructions to find out how to do this.

After more than two years of development we finally released the first stable version of RoundCube Webmail. It’s not as feature rich as we’d like it to be but the released version is considered to run stable for a productive environment. Thanks to our users we fixed many bugs and added some nice new features. So go ahead and upgrade your installations now.

The second release candidate has just been released. This new version comes up with a lot of improvements and fixed bugs. An HTML message composition is also included but disabled by default because it’s still experimental.

In order to force hosters to upgrade to PHP 5 we also support the the GoPHP5 initiative. This means that new versions released after February 5, 2008 will drop support for PHP 4. See our support statement for more details: trac.roundcube.net/trac.cgi/wiki/GoingPHP5