v2.38.2

Fixed

• error '$index is not defined' in Settings > Accounts #1797

v2.38.1

Added

• Admin - Extensions search filter
• Options to unset current font family and size #1726
• Option to allow insecure cryptkey #1746
• Save vCard FN property #1761
• Docker Nginx should listen on IPv6 addresses in addition to IPv4 #1770
• Full-screen Message View on Double-Click #1787

Changed

• Use the custom Squire as submodule at vendors/squire2 and pulled from https://github.com/the-djmaze/Squire/tree/snappymail
• Disallow noembed and noframes HTML elements
• Keep 1 space between HTML elements in compressed templates
• Squire: sanitizeToDOMFragment now uses cleanHTML()
• Squire: improved handling of BR elements #1389
• Nextcloud border-radius by @gnilebein #1790
• Compose window sentFolder handling for #1793
• Update Portuguese by @ner00
• Update Polish by @tinola
• Update French by @hguilbert
• Update Portuguese (Brazil) by @mstolf

Fixed

• Composer dialog scroll got broken in v2.28
• Composer dialog "from" triangle button wrong position due to font changes
• Admin - Config search should be ko.observable() not ko.observableArray()
• Squire: paste images #1389
• Domain whitelist failures on login #1706
• Sieve parse errors
• Sieve support index was not optional for #1709
• Pagination problem for large mailbox after 2.36.1 #1716
• Undefined constant "LOG_ERROR" #1754
• Search Filter Capital "B" not working #1780
• PHP 8.4: Implicitly nullable parameter declarations deprecated

Full Changelog: v2.38.0...v2.38.2

Nextcloud

• Fixed some Nextcloud theme bugs

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations

v2.38.1

Added

• Admin - Extensions search filter
• Options to unset current font family and size #1726
• Option to allow insecure cryptkey #1746
• Save vCard FN property #1761
• Docker Nginx should listen on IPv6 addresses in addition to IPv4 #1770
• Full-screen Message View on Double-Click #1787

Changed

• Use the custom Squire as submodule at vendors/squire2 and pulled from https://github.com/the-djmaze/Squire/tree/snappymail
• Disallow noembed and noframes HTML elements
• Keep 1 space between HTML elements in compressed templates
• Squire: sanitizeToDOMFragment now uses cleanHTML()
• Squire: improved handling of BR elements #1389
• Nextcloud border-radius by @gnilebein #1790
• Compose window sentFolder handling for #1793
• Update Portuguese by @ner00
• Update Polish by @tinola
• Update French by @hguilbert
• Update Portuguese (Brazil) by @mstolf

Fixed

• Composer dialog scroll got broken in v2.28
• Composer dialog "from" triangle button wrong position due to font changes
• Admin - Config search should be ko.observable() not ko.observableArray()
• Squire: paste images #1389
• Domain whitelist failures on login #1706
• Sieve parse errors
• Sieve support index was not optional for #1709
• Pagination problem for large mailbox after 2.36.1 #1716
• Undefined constant "LOG_ERROR" #1754
• Search Filter Capital "B" not working #1780
• PHP 8.4: Implicitly nullable parameter declarations deprecated

Full Changelog: v2.38.0...v2.38.1

Nextcloud

• Fixed some Nextcloud theme bugs

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations

v2.38.0

Important security release!

Read details at GHSA-2rq7-79vp-ffxm

Added

• Remove tel: links when converting HTML to plain #1724
• Convert HTML to Markdown instead of plain, by using Turndown #1604
• Check HTMLInputElement.validity() for #1733

Changed

• Use a modified Squire 2.3.2
• cleanHtml use allowedTags instead of disallowedTags and improved CSS handling
• Update Portuguese by @ner00

Fixed

• mXSS exploit found by SonarSource CVE-2024-45800
• Call to a member function Email() on null #1706
• IMAP capabilities via IMAP Proxy #1725
• Messages on page setting is not validated against 999 max #1733

Full Changelog: v2.37.3...v2.38.0

Nextcloud

• Attempt to improve OpenID Connect support #1746
• Support recurring events from external providers and other improvements #1737

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations

v2.37.3

Added

• Mark images with width=1 as tracking pixel
• Show warning in Admin -> About when PHP runs in 32bit
• Edit ACL rules #157
• Show GnuPG version for #1560
• Make sure only scalar values are allowed in $_ENV for #1560
• Change minimum new mail check interval #1678
• Sieve editor does not support "index" extension #1709

Changed

• Improved domain autoconfig interaction
• MS autodiscover priorities DNS over subdomain
• Simplify sieve scripts list #1675
• Handling of (token) errors due to #1706
• Sabre/Xml to v4.0.5
• Update Chinese by @Artoria2e5
• Update French by @hguilbert

Fixed

• Thread sorting visible after disabling the imap capability #1574
• Creating new message impossible as long as a draft exists? #1710
• InvalidToken error at login #1706

Full Changelog: v2.37.2...v2.37.3

Nextcloud

• Force Nextcloud personal language by default #1428

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations

v2.37.2

Due to my Office365 code for #1645 it made a mess of the Nextcloud integration.
It worked on my test instance, but failed on a different instance (which i didn't use for testing).
So my false assumption was that the failures were inside Nextcloud.
This release removes the Office365 code and it should work again.

Added

• Validate Fetch JSON response

Fixed

• PATH_INFO bug due to Office365 OAuth login
• Prevent logout loop on error

Nextcloud

• Failed loading due to Office365 OAuth2 attempt #1703

v2.37.1

Fixed

• Gulp v5 broke the fonts gulpjs/gulp#2797
• Nextcloud v30

v2.37.0

Added

• JavaScript event rl-vm-visible
• Detailed error message on account switch failure for
  #1594
• Workarounds for Microsoft OAuth2 (currently requires Apache AcceptPathInfo)
  #1645
• Support "mark for deletion"
  #1657 by @smsoft-ru
• Invoke "Update Identity" pop up right after login (when not initialized)
  #1689
• Keyboard shortcut (Shift + B) for "Swap default (background) color"
  #1690

Changed

• Updated gulp to v5
• Replaced vulnerable gulp-header with gulp-append-prepend
• Removed abandoned vulnerable rollup-plugin-html
• Align save button in admin security settings
• Made registerProtocolHandler('mailto') optional by activating at Settings -> General
• Improved InvalidToken handling for
  #1653
• Cleanup localizations
• Update French by @hguilbert
• Update German by @tkasch
• Update Polish by @tinola
• Update Portuguese by @ner00

Fixed

• prevent multiple afterShow() and afterHide() due to transitionend on multiple CSS properties
• Attempt to read property "smimeSigned" on null
• Refreshing mail list doesn't update current message
  #1654
• Deletion of CACHE folder causing error
  #1660
• Multiple line breaks are not displayed
  #1666
• RainLoop\Exceptions\ClientException::__construct(): Argument #2 ($oPrevious) must be of type ?Throwable, string given
  #1686
• SpamAssassin Division by zero
  #1694
• Failed to parse RFC 2822 date '6 Jul 2024 16:42:09 +0200'
  #1694
• Fix capabilities when THREAD is disabled
  #1698 by @akhil1508

Full Changelog: v2.36.4...v2.37.2

Nextcloud

• Failed loading due to incorrect app_path
• Bugfix language detection
• Allow multi-account in nc with oauth login
  #1699 by @akhil1508

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations

v2.37.1

See https://github.com/the-djmaze/snappymail/releases/tag/v2.37.2

v2.37.0

See https://github.com/the-djmaze/snappymail/releases/tag/v2.37.2

v2.36.4

Added

• Customize private key passphrase expiration interval #1545
• AdvancedSearch support for filtering mails before a given date #1606 by @codiflow
• Control valid spam and virus headers #1607
• Remember S/MIME private Key without function #1611
• Resize compose dialog
• Magnetic theme #1637 by @TheCuteFoxxy

Changed

• Improved signing messages by allowing to choose between the options
• Improved language detection code
• More detailed Decrypt errors
• Update French by @hguilbert
• Update Polish by @tinola
• Update Portuguese by @ner00
• Update Spanish by @huloza

Fixed

• Default language error
• Undefined $sEmail in DoAdminDomainMatch
• Handling Autocrypt header failed on = #1608
• Blank lines are inserted when editing draft #1609
• Workaround Cyrus MAILBOXID bug (disable OBJECTID capability by default due to impact) #1640
• Workaround HTML with multiple body elements or MIME with multiple text/html #1641

Full Changelog: v2.36.3...v2.36.4

Nextcloud

• OIDC stay logged in #1620

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations

v2.36.3

Changed

• UserAuth prevent plugin errors (like the Nextcloud plugin did) or else login fails

Fixed

• Undefined variable $aTokenData #1567

Full Changelog: v2.36.1...v2.36.3

Nextcloud

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations

v2.36.2

Added

• "copy to" action in menu's for #1559
• Log signal info for #1569
• OpenPGP.js automatically import backup keys from server

Changed

• Improved "remember me" cookie handling
• Update Basque by @Thadah
• Update Portuguese by @ner00

Fixed

• "Account already exists" #1561
• Properly escape path separator in tar.php file list regex by @sevmonster #1562
• Prevent mkdir() error #1565
• SCRAM Exception when trying to log in to SMTP #1575
• Error when redirected back to instance after Gmail OAuth #1580
• Uncaught TypeError: hasPublicKeyForEmails(...).then is not a function #1589
• Undefined variable $sFilename
• GPG/PGP exec() return false handling

Full Changelog: v2.36.1...v2.36.2

Nextcloud

• OIDC login active again by @avinash-0007 #1572

https://apps.nextcloud.com/apps/snappymail

Docker Hub

https://github.com/the-djmaze/snappymail/wiki/Docker

Integrations

https://github.com/the-djmaze/snappymail/wiki/Installation-instructions#integrations