This release includes security fixes for recently reported vulnerabilities in Roundcube. Users are encouraged to upgrade to version 1.6.12 to keep their installations secure and up to date.
To upgrade ;
# Log in as the RoundCube user:
su - webmail_1
# Download the latest RoundCube version:
wget https://github.com/roundcube/roundcubemail/releases/download/1.6.12/roundcubemail-1.6.12-complete.tar.gz
# Extract the files:
tar -xvzf roundcubemail-1.6.12-complete.tar.gz
cd roundcubemail-1.6.12
# Run the installer:
bin/installto.sh -y ../public_html
# Clean up after installation:
rm -rf ~/roundcubemail-1.6.12*
For each mail server in your Enhance cluster, repeat the process using roundcubelocal as the user. (su - roundcubelocal)
Tip: Ensure that the system and escapeshellarg functions are not included in your disable_functions list, as they are required for the upgrade. Go to Enhance Control Panel > Settings > Service > Application, remove these functions, and then proceed with the upgrade. Once the upgrade is complete, it is recommended to add the system function back to the prohibited functions list.
