<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
	<title type="html"><![CDATA[iRedMail — Security: Patch to fix roundcube 0.1.1 security issues]]></title>
	<link rel="self" href="http://www.iredmail.org/forum/feed-atom-topic13.xml" />
	<updated>2009-05-07T05:08:06Z</updated>
	<generator>PunBB</generator>
	<id>http://www.iredmail.org/forum/topic13-security-patch-to-fix-roundcube-011-security-issues.html</id>
		<entry>
			<title type="html"><![CDATA[Security: Patch to fix roundcube 0.1.1 security issues]]></title>
			<link rel="alternate" href="http://www.iredmail.org/forum/post25.html#p25" />
			<content type="html"><![CDATA[<p>Hi, all.</p><p>Here&#039;s patch to fix roundcubemail-0.1.1-stable security issues.</p><p>All users use iRedMail-0.3.2/0.3.1/0.2/0.1 should apply this patch as soon as possible:</p><p>Steps:</p><p>- Backup current web files (we assume you backup to /opt/backup/):</p><div class="codebox"><pre><code># cp -rfvp /var/www/roundcubemail-0.1.1/ /opt/backup/</code></pre></div><p>- Download attached patch, copy it to /root/ directory, then patch it:<br /></p><div class="codebox"><pre><code># cd /var/www/roundcubemail-0.1.1/
# patch -p0 &lt; /root/roundcubemail-CVE-2008-5619.patch</code></pre></div><p>Related resource links:</p><p>&nbsp; &nbsp; - Break-in possiblity via html2text.php?<br />&nbsp; &nbsp; &nbsp; <a href="http://trac.roundcube.net/ticket/1485618">http://trac.roundcube.net/ticket/1485618</a></p><p>&nbsp; &nbsp; - Security update for 0.2-beta<br />&nbsp; &nbsp; &nbsp; <a href="http://lists.roundcube.net/mail-archive/dev/2008-12/0000039.html">http://lists.roundcube.net/mail-archive … 00039.html</a></p><p>Note: patch comes from Fedora EPEL repository, thanks wumingzhang for his remind: <br /><a href="http://download.fedora.redhat.com/pub/epel/5/SRPMS/roundcubemail-0.1.1-5.el5.src.rpm">http://download.fedora.redhat.com/pub/e … l5.src.rpm</a></p>]]></content>
			<author>
				<name><![CDATA[ZhangHuangbin]]></name>
				<uri>http://www.iredmail.org/forum/user2.html</uri>
			</author>
			<updated>2009-05-07T05:08:06Z</updated>
			<id>http://www.iredmail.org/forum/post25.html#p25</id>
		</entry>
</feed>
