Opened 6 years ago

Closed 6 years ago

#6855 closed Bug/Something is broken (fixed)

roundcube needs an upgrade to 0.8.5

Reported by: https://id.mayfirst.org/dkg Owned by: https://id.mayfirst.org/jamie
Priority: Urgent Component: Tech
Keywords: f2f roundcube.mayfirst.org roundcube Cc:
Sensitive: no

Description

roundcube needs to be updated to 0.8.5. see the release notes. This prevents a known XSS attack, so it really needs to happen soon.

Change History (7)

comment:1 Changed 6 years ago by https://id.mayfirst.org/ross

Do you have time to work on this dkg?

comment:2 Changed 6 years ago by https://id.mayfirst.org/dkg

no.

comment:3 Changed 6 years ago by https://id.mayfirst.org/ross

  • Keywords f2f added
  • Owner set to https://id.mayfirst.org/jamie
  • Status changed from new to assigned

Me either...Let's let jamie bring it up at the f2f.

comment:4 Changed 6 years ago by https://id.mayfirst.org/jamie

  • Resolution set to fixed
  • Status changed from assigned to closed

After flailing around I finally found #6488 and #6131 which gave some clues on how to upgrade.

We now have a more permanent wiki page.

And, the upgrade is complete.

comment:5 Changed 6 years ago by https://id.mayfirst.org/dkg

  • Resolution fixed deleted
  • Status changed from closed to assigned

Thanks for making the wiki page, jamie! sorry that the docs are so scattered.

digging deeper, #6475 suggests we have an mf/pl roundcube git repo where we are publicly tracking our changes (in the hopes that they will be more accessible to upstream). this repo also allows us to make signed tags that we can upgrade our production and dev server from.

I don't think this shared repo was updated to reflect the changes here, so that probably needs to happen (and the wiki page probably needs to be updated to reflect that.

comment:6 Changed 6 years ago by https://id.mayfirst.org/dkg

  • Sensitive unset

comment:7 Changed 6 years ago by https://id.mayfirst.org/jamie

  • Resolution set to fixed
  • Status changed from assigned to closed

Ah - I missed that. It should now be updated. I also updated the wiki.

Please login to add comments to this ticket.

Note: See TracTickets for help on using tickets.