Control Web Panel

WebPanel => E-Mail => Topic started by: unlim on April 26, 2025, 12:57:52 PM

Title: Roundcube - insecure version with CWP
Post by: unlim on April 26, 2025, 12:57:52 PM

CWP always installs 1.4.11 as latest roundcube version.
But 1.4.11 is from far 2021 - 4 years outdated version.

There is 1.4.15 with many XSS fixes.
There are more reliable 1.5* and 1.6* versions.

How to have secure roundcube with CWP?

Title: Re: Roundcube - insecure version with CWP
Post by: overseer on April 26, 2025, 02:24:27 PM

There is already an "authoritative" thread regarding that on this forum. Follow these directions, but amend them to version 1.5.9, a secure LTS version. (Change anything in the instructions from 1.5.8 to 1.5.9):
https://www.alphagnu.com/topic/33-update-cwp-roundcube-mail-version-158-%E2%80%93-control-web-panel/#comment-35 (https://www.alphagnu.com/topic/33-update-cwp-roundcube-mail-version-158-%E2%80%93-control-web-panel/#comment-35)

Title: Re: Roundcube - insecure version with CWP
Post by: Starburst on April 27, 2025, 01:12:33 PM

Here's a simple article if you are using AlmaLinux 8 or 9 to update RoundCube to 1.5.9 LTS.

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/update-roundcube-mail-version-1-5-9-in-cwp-on-almalinux-8-9/ (https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/update-roundcube-mail-version-1-5-9-in-cwp-on-almalinux-8-9/)