Roundcube Webmail 1.3.1

This is the first service release to update the stable version 1.3. We did some touching-up on the new features introduced with the 1.3.0 release. For example it brings back the double-click behavior to open messages which was reduced to the list-only view. Because the switch to change the mail view layout was a bit hidden, we also added it to the preferences section.

The update also includes fixes to reported bugs and one potential XSS vulnerability as well as optimizations to smoothly run on the latest version of PHP. A detailed list of changes is shown below.

It's considered stable and we recommend to update all productive installations of Roundcube with this version. Please do backup your data before updating!

CHANGELOG

• Don't ignore (global) userlogins/sendmail logs in per_user_logging mode
• Add Preferences > Mailbox View > Main Options > Layout (#5829)
• Password: Fix compatibility with PHP 7+ in cpanel_webmail driver (#5820)
• Managesieve: Fix parsing dot-staffed lines in multiline text (#5838)
• Managesieve: Fix AM/PM suffix in vacation time selectors
• Managesieve: Fix bug where 'exists' operator was reset to 'contains' (#5899)
• Remove non-printable characters from filenames on download/display (#5880)
• Fix decoding non-ascii attachment names from TNEF attachments (#5646, #5799)
• Fix uninitialized string offset warnings and make sure random_bytes() has the requested length (#5788)
• Fix bug where HTML messages with @media styles could moddify style of page body (#5811)
• Fix style issue on selected and unfocused message that is part of a thread (#5798)
• Fix bug where a.button style from managesieve plugin could impact other elements (#5800)
• Fix position of selected icon for (Mailvelope) Encrypt button
• Fix fatal error when using DMY- or MDY-based date format in PostgreSQL (#5808)
• Fix bug where errors were not printed when using bin/update.sh (#5834)
• Fix PHP 7.2 warnings on count() use (#5845)
• Fix bug where Chrome could not upload the same file that was selected before (#5854)
• Fix duplicate messages on the list after deleting messages on the next to the last page (#5862)
• Fix bug where messages count was not updated after delete when imap_cache is set (#5872)
• Fix potential XSS vulnerability with malformed HTML message markup
• Fix sending message with "Too many public recipients" dialog buttons (#5924)
• Bring back double-click behavior on the message list which was removed in 1.3.0 (#5823)
• Enigma: Fix decrypting an encrypted+signed message when signature verification fails (#5914)