Skip to content

@thomascube thomascube released this Sep 16, 2019 · 26 commits to master since this release

This is the long awaited second release candidate for the next major version 1.4 of Roundcube webmail. Many fixes, improvements and final touches have gone into this since the first release candidate was published.

We strongly encourage everybody to customize the Elastic skin using the _styles.less and _variables.less files to blend into your corporate design. You'll find guidance for customization in the file inside the skin folder.

Rolling out a new and significantly different user interface should be carefully planned and we recommend to prepare your users for the change. Therefore the Elastic theme is not set to be the default theme. Adjust your config in order to enable it by default or let your users switch themselves in the user settings.

Please note that the Classic skin will no longer be maintained and completely removed in future releases. Within the 1.4 release series, the Classic skin remains part of the package but it will not receive new features that were added to the Larry or Elastic themes.

This is still a preview release and we recommend to test it on a separate environment.
And don't forget to backup your data before installing it.


  • Update to jQuery 3.4.1
  • Clarified 'address_book_type' option behavior (#6680)
  • Added cookie mismatch detection, display an error message informing the user to clear cookies
  • Renamed 'log_session' option to 'session_debug'
  • Removed 'delete_always' option (#6782)
  • Don't log full session identifiers in userlogins log (#6625)
  • Support $HasAttachment/$HasNoAttachment keywords (#6201)
  • Support PECL memcached extension as a session and cache storage driver (experimental)
  • Switch to IDNA2008 variant (#6806)
  • Add possibility to run the update even on the up-to-date installation (#6533)
  • Plugin API: Add 'render_folder_selector' hook
  • Added 'keyservers' option to define list of HKP servers for Enigma/Mailvelope (#6326)
  • Added flag to disable server certificate validation via Mysql DSN argument (#6848)
  • Select all records on the current list page with CTRL + A (#6813)
  • Use Left/Right Arrow keys to faster move over threaded messages list (#6399)
  • Changes in display_next setting (#6795):
    • Move it to Preferences > User Interface > Main Options
    • Make it apply to Contacts interface too
    • Make it apply only if deleting/moving a previewed message/contact
  • Redis: Support connection to unix socket
  • Put charset meta specification before a title tag, add page title automatically (#6811)
  • Elastic: Various internal refactorings
  • Elastic: Add Prev/Next buttons on message page toolbar (#6648)
  • Elastic: Close search options on Enter key press in quick-search input (#6660)
  • Elastic: Changed some icons (#6852)
  • Elastic: Changed read/unread icons (#6636)
  • Elastic: Changed "Move to..." icon (#6637)
  • Elastic: Add hide/show for advanced preferences (#6632)
  • Elastic: Add default icon on Settings/Preferences lists for external plugins (#6814)
  • Elastic: Add indicator for popover menu items that open a submenu (#6868)
  • Elastic: Move compose attachments/options to the right side (#6839)
  • Elastic: Add border/background to attachments list widget (#6842)
  • Elastic: Add "Show unread messages" button to the search bar (#6587)
  • Elastic: Fix bug where toolbar disappears on attachment menu use in Chrome (#6677)
  • Elastic: Fix folders list scrolling on touch devices (#6706)
  • Elastic: Fix non-working pretty selects in Chrome browser (#6705)
  • Elastic: Fix issue with absolute positioned mail content (#6739)
  • Elastic: Fix bug where some menu actions could cause a browser popup warning
  • Elastic: Fix handling mailto: URL parameters in contact menu (#6751)
  • Elastic: Fix keyboard navigation in some menus, e.g. the contact menu
  • Elastic: Fix visual issue with long buttons in .boxwarning (#6797)
  • Elastic: Fix handling new-line in text pasted to a recipient input
  • Elastic: Fix so search is not reset when returning from the message preview page (#6847)
  • Larry: Fix regression where menu actions didn't work with keyboard (#6740)
  • ACL: Display user/group names (from ldap) instead of acl identifier
  • Password: Added ldap_exop driver (#4992)
  • Password: Added support for SSHA512 password algorithm (#6805)
  • Managesieve: Fix bug where global includes were requested for vacation (#6716)
  • Managesieve: Use RFC-compliant line endings, CRLF instead of LF (#6686)
  • Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled (#6723)
  • Enigma: For verified signatures, display the user id associated with the sender address (#5958)
  • Enigma: Fix bug where revoked users/keys were not greyed out in key info
  • Enigma: Fix error message when trying to encrypt with a revoked key (#6607)
  • Enigma: Fix "decryption oracle" bug [CVE-2019-10740] (#6638)
  • Enigma: Fix bug where signature verification could have been skipped for some message structures (#6838)
  • Fix language selection for spellchecker in html mode (#6915)
  • Fix css styles leak from replied/forwarded message to the rest of the composed text (#6831)
  • Fix invalid path to "add contact" icon when using assets_path setting
  • Fix invalid path to blocked.gif when using assets_path setting (#6752)
  • Fix so advanced search dialog is not automatically displayed on searchonly addressbooks (#6679)
  • Fix so an error is logged when more than one attachment plugin has been enabled, initialize the first one (#6735)
  • Fix bug where flag change could have been passed to a preview frame when not expected
  • Fix bug in HTML parser that could cause missing text fragments when there was no head/body tag (#6713)
  • Fix bug where HTML messages with a xml:namespace tag were not rendered (#6697)
  • Fix TinyMCE download location (#6694)
  • Fix so "Open in new window" consistently displays "external window" interface (#6659)
  • Fix bug where next row wasn't selected after deleting a collapsed thread (#6655)
  • Fix bug where external content (e.g. mail body) was passed to templates parsing code (#6640)
  • Fix bug where attachment preview didn't work with x_frame_options=deny (#6688)
  • Fix so bin/ returns error code on error (#6704)
  • Fix bug where bmp images couldn't be displayed on some systems (#6728)
  • Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp (#6744)
  • Fix bug where bold/strong text was converted to upper-case on html-to-text conversion (6758)
  • Fix bug in rcube_utils::parse_hosts() where %t, %d, %z could return only tld (#6746)
  • Fix bug where Next/Prev button in mail view didn't work with multi-folder search result (#6793)
  • Fix bug where selection of columns on messages list wasn't working
  • Fix bug in converting multi-page Tiff images to Jpeg (#6824)
  • Fix bug where handling multiple messages from multi-folder search result could not work (#6845)
  • Fix bug where unread count wasn't updated after moving multi-folder result (#6846)
  • Fix wrong messages order after returning to a multi-folder search result (#6836)
  • Fix some PHP 7.4 compat. issues (#6884, #6866)
  • Fix bug where it was possible to bypass the position:fixed CSS check in received messages (#6898)
  • Fix bug where some strict remote URIs in url() style were unintentionally blocked (#6899)
  • Fix bug where it was possible to bypass the CSS jail in HTML messages using :root pseudo-class (#6897)
  • Fix bug where it was possible to bypass href URI check with data:application/xhtml+xml URIs (#6896)
Assets 8
You can’t perform that action at this time.