Security: Upgrade Roundcube to 1.6.11

MarkD

asmdot Yes I would have expected any mail role server to be updated in the same way that the central mail server is updated.

PDudeP

Adam Yes, most probably yes. I remembered that and reinstalled the app role. I tried removing all disabled functions on the cluster, but it didn't do the trick.
So, i guess I'll open a ticket.

Thanks

PDudeP

Adam solved it. Thank you all, guys.

blackpoint

Adam
and after ./bin/installto.sh ../public_html you should do an
cd .. rm -rf roundcubemail-1.6.11 roundcubemail-1.6.11-complete.tar.gz
to clean up.
best regards,
Dirk

AdamR

Just to make sure I'm understanding this correctly, we only perform this on the Mail server, and then apt update && apt upgrade on the remaining servers with different roles to upgrade Enhance to 12.6.2?

mrEckendonk

Roundcube Webmail 1.6.11
Copyright © 2005-2025, The Roundcube Dev Team

Thank You @Adam , all working fine.

eilko

Adam Enhance automatically updates any central Roundcube installations running on your control panel server.
The per-server Roundcube that runs on each mail server to provide webmail at mail.customerdomain.com needs to be updated manually.

can anyone explain why Enhance can update the one CP server but not on the mail server?

Kosta

eilko good question

slimx

Update worked fine on my end.

Kosta

Approximately when we can see?
Update buttons within Enhance regarding:
Enhance
Web apps
Database apps
Mail apps
With notifications from cp server when update is available to our inboxes and within the dashboard..
Etc.
@Adam

mendozal

Kosta I think most services: web servers, databases, and email services like Postfix and Dovecot, usually get updated with a regular apt update and apt upgrade. But other stuff like Roundcube might not be included and could need more attention/automation.

Kosta

mendozal I hope everything to get automated

AdamR

sendunlimitedemail Roundcube itself doesn’t handle sending mail via SMTP — that’s handled by Postfix. Regardless of whether you’re using a smart host for outbound SMTP, if your clients are using webmail, I think you are definitely going to want to install this update.