Author Topic: Roundcube - insecure version with CWP  (Read 102 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
Roundcube - insecure version with CWP
« on: April 26, 2025, 12:57:52 PM »
CWP always installs 1.4.11 as latest roundcube version.
But 1.4.11 is from far 2021 - 4 years outdated version.

There is 1.4.15 with many XSS fixes.
There are more reliable 1.5* and 1.6* versions.

How to have secure roundcube with CWP?

Offline
*****
Re: Roundcube - insecure version with CWP
« Reply #1 on: April 26, 2025, 02:24:27 PM »
There is already an "authoritative" thread regarding that on this forum. Follow these directions, but amend them to version 1.5.9, a secure LTS version. (Change anything in the instructions from 1.5.8 to 1.5.9):
https://www.alphagnu.com/topic/33-update-cwp-roundcube-mail-version-158-%E2%80%93-control-web-panel/#comment-35

Offline
*****
Re: Roundcube - insecure version with CWP
« Reply #2 on: April 27, 2025, 01:12:33 PM »