@thomascube thomascube released this Sep 10, 2017 · 2069 commits to master since this release

Assets 8

This is a service and security update to the stable version 1.2. It contains some important bug fixes and improvements which we picked from the upstream branch. A detailed list of changes is shown below.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating!


  • Don't ignore (global) userlogins/sendmail logging in per_user_logging mode
  • Enigma: Fix compatibility with assets_dir
  • Managesieve: Fix AM/PM suffix in vacation time selectors
  • Fix bug where comment notation within style tag would cause the whole style to be ignored (#5747)
  • Fix bug where it wasn't possible to scroll folders list in Edge (#5750)
  • Fix addressbook searching by gender (#5757)
  • Fix SQL syntax error on MariaDB 10.2 (#5774)
  • Fix bug where it wasn't possible to set timezone to auto-detected value (#5782)
  • Fix uninitialized string offset in rcube_utils::bin2ascii() and make sure rcube_utils::random_bytes() result has always requested length (#5788)
  • Fix potential XSS vulnerability with malformed HTML message markup