Control Web Panel

WebPanel => Updates => Topic started by: ripieces on December 07, 2016, 01:45:29 PM

Title: Roundcube might need an update for security reasons
Post by: ripieces on December 07, 2016, 01:45:29 PM

https://roundcube.net/news/2016/11/28/updates-1.2.3-and-1.1.7-released
https://blog.ripstech.com/2016/roundcube-command-execution-via-email/

To the problems above there is no CVE assigned yet it seems:
http://www.cvedetails.com/vulnerability-list/vendor_id-8905/Roundcube.html

CWP currently has Roundcube RELEASE 0.8.4

Title: Re: Roundcube might need an update for security reasons
Post by: je2u on December 07, 2016, 02:16:02 PM

Code: [Select]

mkdir /home/roundcube_backup
cp -R /usr/local/apache/htdocs/roundcube/* /home/roundcube_backup
wget http://softlayer-sng.dl.sourceforge.net/project/roundcubemail/roundcubemail/1.1.1/roundcubemail-1.1.1-complete.tar.gz
tar zxvf roundcubemail-1.1.1-complete.tar.gz
cd roundcubemail-1.1.1
bin/installto.sh /usr/local/apache/htdocs/roundcube
chown -R nobody:nobody /usr/local/apache/htdocs/roundcube