Rimas 1d ago
Sugalvojau atsinaujinti #RoundCube webmailo instaliaciją savo servery. Galvojau bus viens-du-done.
Iš pirmo karto nepaėjo, nes serveryje yra dvi PHP versijos, ir konsolėje numatytoji, aišku, ne ta, kurią webmailui naudoju (naudoju senesnę, nes tiesiog neprišokau atsinaujinti tos vietos). Pakeičiau numatytąją, perleidau atnaujinimą (jau užtrukau ilgiau nei planavau).
Ir vis tiek dabar turiu RoundCoube'ą be grafinės temos, nes dar kažką ne taip susikonfigūravęs. 😀
Marcel SIneM(S)US2d ago
#Roundcube-Webmail-Instanzen mit Schadcode attackierbar | Security https://www.heise.de/news/Roundcube-Webmail-Instanzen-mit-Schadcode-attackierbar-11307545.html #Patchday #SQLinjection #XSS #CrossSiteScripting
Roundcube-Webmail-Instanzen mit Schadcode attackierbar

In aktuellen Version haben die Entwickler von Roundcube Webmail mehrere Sicherheitslücken geschlossen.

heise online
Millux5d ago
#roundcube #linux Wer Roundcube Mail selbst hostet: Bitte nicht ungeprüft von 1.6.x auf 1.7.x migrieren. Das kann schief gehen, weil die Version 1.7 neue Strukturen im Webserver und PHP ab Version 8.5 erfordert. Und zurück migrieren geht schlecht, weil das Datenbankschema beim Upgrade verändert wird
mastodon.raddemo.host5d ago

🚀 How to Install #Roundcube on Rocky Linux #VPS (5 Minute Quick-Start Guide)

This article explains how to install Roundcube on Rocky Linux VPS.
What is Roundcube?
Roundcube is a free, open-source webmail application—a browser-based email client you host on your own server. It provides a modern, Gmail-like UI on top of your existing IMAP/SMTP mail server (e.g., ...
Continued 👉 https://blog.radwebhosting.com/install-roundcube-on-rocky-linux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #apache #phpfpm #mariadb #certbot #rockylinux #selfhosting #letsencrypt #selfhosted

Show threadKennyMay 25
The changes in #Roundcube also mean that versions >= 1.7 will probably stop working on simple shared hosting services in the future which only provide the htdocs folder to the user. It might already be permanently broken on shared hosting services that use #NGINX.
KennyMay 25

TIL: Was wondering why #Roundcube broke when moving from version 1.6 to 1.7.

Turns out that the core maintainer introduced a "static.php" that now serves all static files because he was unhappy that people didn't use the "public_html/" folder to serve content.

That means that the retrieval of each and every single static file now needs a PHP process. The script is already collecting workarounds left and right. What utter bullshit.

https://github.com/roundcube/roundcubemail/pull/9294

Add static files server by alecpl · Pull Request #9294 · roundcube/roundcubemail

In an attempt to improve an overall security of Roundcube installation related to the fact that people aren't using our public_html folder, I prepared an initial implementation of a static file...

GitHub
TresseoMay 25

https://roundcube.net/news/2026/05/24/security-updates-1.6.16-and-1.7.1

#roundcube #webmail #securityupdate

Security updates 1.6.16 and 1.7.1 released

Free and open source webmail software for the masses, written in PHP

Patchday RobotMay 25
New Version: #Roundcube 1.7.1 (stable;All) http://roundcube.net/download
Roundcube Webmail Downloads

Free and open source webmail software for the masses, written in PHP

Show threadIBBoardMay 24

Apparently #RoundCube is REALLY concerned about security, and that's why it's got this new "route ALL static resources through PHP" thing going on.

Also in RoundCube: My CSP policy is complaining because I've not included `unsafe-eval` 😑

IBBoardMay 24

Apparently RoundCube webmail now has "mandatory public_html/ entry point" and I'm trying to work out what that means and how to work with it.

I run a VPS. I don't bother with `public_html` for everything. Every website has its directory that is for the public HTML. I don't need a per-site directory _and_ a public_html directory.

But apparently the upgrade might break my system for a while until I work out the change of config required 🙄

#RoundCube #Webmail