to do an upgrade of roundcube for plesk 17 to version 1.2.3
This week a critical security issue for roundcube has been reported: https://blog.ripstech.com/2016/roundcube-command-execution-via-email/
This is present in all roundcube versions below 1.2.3
Thank you very much.
Anonymous
shared this idea
The Roundcube was updated in Plesk Onyx 17.8.11. We suggest you to upgrade to Plesk Onyx 17.8.11 MU1 and check it out (https://docs.plesk.com/release-notes/onyx/change-log/#contents-17811-mu1).
The Roundcube also was updated in Plesk Onyx 17.5.3 MU29 (https://docs.plesk.com/release-notes/onyx/change-log/#contents-1753-mu29) and Plesk Onyx 17.0.17 MU40 (https://docs.plesk.com/release-notes/onyx/change-log/#contents-17017-mu40).
Let us know if you have any feedback
— AY
-
DerDanilo commented
Please find a way to keep roundcube up to date with stable releases once they are out.
There are many many bug fixes and version change quiet often sometimes.Roundcube, as it is one of the default webmail solutions, could be updates with every Plesk patch release. :)
-
Anonymous
commented
There were many updates, but sadly none on roundcube 1.2.3.
Thank you. -
Cool Dark
commented
Any update on this, almost 3 months after the relase of 1.2.3 or are you waiting till 1.3 is out of beta?