Greetings-

I did a quick search for my problem, but I did not find anything that seemed to match. Aplogies if this has been covered and I simply missed it.

Has anyone experienced a "glitchy" toolbar when responding to emails in Roundcube using the HTML composer? I am frequently unable to respond to emails with colored or bolded text when I am trying to highlight my responses.

I am using both the latest macOS release and Google Chrome.

Thanks for chiming in!

Hi all,

i recently updated to Ubuntu 26.04 resolute LTS:

root@bywater ~ # lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 26.04 LTS
Release:        26.04
Codename:       resolute

that contains roundcube 1.6.11:

root@bywater ~ # dpkg -l roundcube
┌── Desired=Unknown/Install/Remove/Purge/Hold
│┌─ Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
││┌ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
│││ Name           Version       Architecture Description
├┼┼─══════════════─═════════════─════════════─════════════════════════════════════════════════════════════════════
ii  roundcube      1.6.11+dfsg-1 all          skinnable AJAX based webmail solution for IMAP servers - metapackage

and also php8.5:

root@bywater ~ # dpkg -l php
┌── Desired=Unknown/Install/Remove/Purge/Hold
│┌─ Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
││┌ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
│││ Name           Version         Architecture Description
├┼┼─══════════════─═══════════════─════════════─═══════════════════════════════════════════════════════
ii  php            2:8.5+99ubuntu1 all          server-side, HTML-embedded scripting language (default)

With php8.5, roundcube 1.6.11 cannot start (known):
 roundcube-gc.service - Purge expired Roundcube sessions, caches and tempfiles
     Loaded: loaded (/usr/lib/systemd/system/roundcube-gc.service; static)
     Active: failed (Result: exit-code) since Thu 2026-08-20 12:35:00 CEST; 19min ago
 Invocation: 885d5ce3db344979b5105f057bcbbc99
TriggeredBy: ● roundcube-gc.timer
       Docs: https://github.com/roundcube/roundcubemail/wiki/Installation
    Process: 2247205 ExecStart=/usr/share/roundcube/bin/gc.sh (code=exited, status=255/EXCEPTION)
   Main PID: 2247205 (code=exited, status=255/EXCEPTION)
   Mem peak: 13.1M
        CPU: 78ms

Aug 20 12:35:00 bywater systemd[1]: Starting roundcube-gc.service - Purge expired Roundcube sessions, caches and tempfi>
Aug 20 12:35:00 bywater gc.sh[2247205]: PHP Fatal error:  Cannot redeclare function array_first() in /usr/share/roundcu>
Aug 20 12:35:00 bywater gc.sh[2247205]: Stack trace:
Aug 20 12:35:00 bywater gc.sh[2247205]: #0 /usr/share/roundcube/program/include/clisetup.php(25): require_once()
Aug 20 12:35:00 bywater gc.sh[2247205]: #1 /usr/share/roundcube/bin/gc.sh(22): require('...')
Aug 20 12:35:00 bywater gc.sh[2247205]: #2 {main}
Aug 20 12:35:00 bywater systemd[1]: roundcube-gc.service: Main process exited, code=exited, status=255/EXCEPTION
Aug 20 12:35:00 bywater systemd[1]: roundcube-gc.service: Failed with result 'exit-code'.
Aug 20 12:35:00 bywater systemd[1]: Failed to start roundcube-gc.service - Purge expired Roundcube sessions, caches and>
~

I cannot downgrade php to 8.4 because that will break a lot of services. So i have to upgrade roundcube to 1.7.x. Ubuntu does not provide a roundcube package other than 1.6.11, and it seems to plan  to continue so for the next release. So i need a source for a recent roundcube package to avoid an install from sources. Are there any?

Kind regards,
QNo

Does Anybody know what could be causing my folders to load strangely?  As far as I know, on the previous server, the folders loaded normally.

I did a Test Install of the Newest version in Softaculous.  And the folders are Normal there.  However, keeping 1.4.15 is important to me!

Appears like I'm the only one that's ever had this issue.  :--)

While I can read my email remotely, I cannot send.
I see AUTH error on my server.
I suspect that something changed when I updated to V1.6.17.
This is the first time I have used roundcube to send for several months but it used to work for me.

I get the confusion. Creating folders is separate from moving emails into them. That requires server-side filtering, like Sieve rules via the managesieve plugin.

Just made an account and came here to say THIS!  I have been using roundcube for main domain email for over 10years and then this morning was faced with this totally inefficient, mind boggling design that is a total freaking mess and waste of screen space.

Quote from: JMcSal on August 10, 2026, 05:27:03 PMAgree with everyone here - I cannot stand the columns which make it hard to see which email I'm trying to access. It's extremely frustrating and hard on the eyes. Please bring back an interface with the email list on the top and the preview pane below. I've always preferred Roundcube, but I'll be forced to look  for an alternative if this isn't changed.

Peço, por favor que  atendam a este pedido urgente ..
Voltar a ter as listas de email acima e painel de visualização abaixo!

Não estou conseguindo trabalhar! NOS AJUDEM!

We just published security updates to the 1.6 LTS and 1.7 versions of Roundcube Webmail. They both contain fixes for recently reported security vulnerabilities.

Security fixes

• Add basic validation for content proxied by the css proxy
• Fix SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets, reported by Dmytro Ivanenko
• Fix SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading is_local_url() check, reported by Milan Hoppe
• Fix remote content blocking bypass via unclosed url() in a FuncIRI attribute, reported by Milan Hoppe
• Fix LDAP filter injection via unescaped %u/%fu/%d substitution into the search_filter, reported by Milan Hoppe
• Fix arbitrary Sieve script injection via a filter rule name bypassing managesieve_disabled_actions, reported by Milan Hoppe
• Fix RCE via cmd_learn driver of markasjunk plugin, reported by nept1337
• Fix IMAP command injection via mail search and LITERAL+ byte-count desynchronization, reported by Zach Hanley of Horizon3.ai
• Fix password's modoboa driver leak of an authentication token to a user-controlled host, reported by meifukun
• Fix stored XSS in "Add to address book" action, reported by Paulos Yibelo from pwn.ai
• Fix HTML/CSS sanitization bypass via SVG animate by attribute, reported by vectrain

See the full changelogs in the release notes on the Github download pages for the updated versions 1.6.18 and 1.7.3.

We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.7.x with this new versions.

Source: https://roundcube.net/news/2026/07/05/security-updates-1.6.17-and-1.7.2
Get it Now: https://roundcube.net/download

Agree with everyone here - I cannot stand the columns which make it hard to see which email I'm trying to access. It's extremely frustrating and hard on the eyes. Please bring back an interface with the email list on the top and the preview pane below. I've always preferred Roundcube, but I'll be forced to look  for an alternative if this isn't changed.

Contact the person who gave you access to your email account. They can help you change your password or point you to the right support.