RoundCube Webmail 0.2-stable released

smtalk

Administrator
Staff member
Joined
Aug 22, 2006
Messages
10,629
Location
LT, EU
Quote from roundcube.net:

The second stable version of the RoundCube Webmail package completes unfinished work from the 0.2-stable release and comes up with about 80 bugfixes as well as some performance improvements. The upgrading process now became very easy with the integrated update script. It's runnable from the shell or from within the web-based installer. Read the UPGRADING instructions for details.

This version is considered stable and we recommend to update existing installations of RoundCube.
 
It should be available soon. If you want to install it manually:
Code:
cd /usr/local/directadmin/custombuild
./build update
wget -O roundcubemail-0.2-stable.tar.gz http://switch.dl.sourceforge.net/sourceforge/roundcubemail/roundcubemail-0.2-stable.tar.gz
perl -pi -e 's|roundcubemail:0.1.1:a2bf665acd7f8a6b2b63c92aedefb23f|roundcubemail:0.2-stable:a029f57239fe32ea133357f4208f753f|' versions.txt
./build roundcube
 
It should be available soon. If you want to install it manually:
Code:
cd /usr/local/directadmin/custombuild
./build update
wget -O roundcubemail-0.2-stable.tar.gz http://switch.dl.sourceforge.net/sourceforge/roundcubemail/roundcubemail-0.2-stable.tar.gz
perl -pi -e 's|roundcubemail:0.1.1:a2bf665acd7f8a6b2b63c92aedefb23f|roundcubemail:0.2-stable:a029f57239fe32ea133357f4208f753f|' versions.txt
./build roundcube


It should be pointed out that this still leaves the old (vulnerable) install of roundcube intact. The symlink is repointed but an attacker can still call the old install directly if they choose to.
 
It should be pointed out that this still leaves the old (vulnerable) install of roundcube intact. The symlink is repointed but an attacker can still call the old install directly if they choose to.

You can remove the old folder in /var/www/html.
 
It should be pointed out that this still leaves the old (vulnerable) install of roundcube intact. The symlink is repointed but an attacker can still call the old install directly if they choose to.

Why do you think so? clean_old_webapps=yes in the options.conf doesn't leave old webapps.
 
How do you know the vulnerbility is even fixed?
 
Strangely after upgrading, I get double folders (see pic) and a bit of problems too...messages not in correct folder. How can these be corrected?

vr593l.jpg
 
Check $rcmail_config['default_imap_folders'] in /var/www/html/roundcube/config/main.inc.php.
 
A fix:
Code:
cd /var/www/html/roundcube/config
/usr/bin/perl -pi -e "s|\['imap_root'] = null|\['imap_root'] = 'INBOX'|" main.inc.php
/usr/bin/perl -pi -e "s|\['imap_delimiter'] = null|\['imap_delimiter'] = '.'|" main.inc.php
 
Thanks solved...can you include the fix in custombuild so others dont face this issue?
 
Already customized these options since the beginning.. there are some other options that also need to be set for a optimized installation..

Better connect the spam/drafts/sent/trash folders to the folders dovecot uses.. to avoid double ones.
 
It should be available soon. If you want to install it manually:
Code:
cd /usr/local/directadmin/custombuild
./build update
wget -O roundcubemail-0.2-stable.tar.gz http://switch.dl.sourceforge.net/sourceforge/roundcubemail/roundcubemail-0.2-stable.tar.gz
perl -pi -e 's|roundcubemail:0.1.1:a2bf665acd7f8a6b2b63c92aedefb23f|roundcubemail:0.2-stable:a029f57239fe32ea133357f4208f753f|' versions.txt
./build roundcube

Thanks for the info, upgraded tonight with ease and removed the 0.1.1 folder in /var/www/html
 
Yes, it is.

Fantastic looking good, still got some error messages but they're still to be ignored right?:

Code:
cp: cannot stat `/var/www/html/roundcube/logs/*': No such file or directory
cp: cannot stat `/var/www/html/roundcube/temp/*': No such file or directory
This instance of RoundCube is not yet configured!
Open http://url-to-roundcube/installer/ in your browser and follow the instuctions.

ERROR 1091 (42000) at line 6 in file: 'SQL/mysql.update.sql': Can't DROP 'idx'; check that column/key exists

Another question is about the main.inc.php file, with the imap_root & imap_delimiter set like the script does now I can't access my subfolders, they also don't show up as folders I can subscribe to because the folders (created with SquirrelMail) aren't called INBOX.Subfolder but just Subfolder. Maybe a more general way is to just set:

$rcmail_config['drafts_mbox'] = 'INBOX.Drafts';
$rcmail_config['junk_mbox'] = 'INBOX.spam';
$rcmail_config['sent_mbox'] = 'INBOX.Sent';
$rcmail_config['trash_mbox'] = 'INBOX.Trash';
$rcmail_config['default_imap_folders'] = array('INBOX.Drafts', 'INBOX.Sent', 'INBOX.spam', 'INBOX.Trash');

and leave imap_root empty?
 
Back
Top