From 14bdeb5e1e90d5368923290299485f538d3396ee Mon Sep 17 00:00:00 2001 From: Alexander Graf Date: Wed, 30 Jun 2021 12:36:11 +0200 Subject: [PATCH 1/2] Update version of roundcube webmail and carddav plugin. This is a security update. - roundcube 1.4.11 - carddav 4.1.2 --- towncrier/UPDATE-ROUNDCUBE.feature | 1 + webmails/roundcube/Dockerfile | 12 ++++-------- 2 files changed, 5 insertions(+), 8 deletions(-) create mode 100644 towncrier/UPDATE-ROUNDCUBE.feature diff --git a/towncrier/UPDATE-ROUNDCUBE.feature b/towncrier/UPDATE-ROUNDCUBE.feature new file mode 100644 index 00000000..85bd17fc --- /dev/null +++ b/towncrier/UPDATE-ROUNDCUBE.feature @@ -0,0 +1 @@ +Update version of roundcube webmail and carddav plugin. This is a security update. diff --git a/webmails/roundcube/Dockerfile b/webmails/roundcube/Dockerfile index 0c8a1f42..fae02ce0 100644 --- a/webmails/roundcube/Dockerfile +++ b/webmails/roundcube/Dockerfile @@ -16,9 +16,9 @@ RUN apt-get update && apt-get install -y \ # Shared layer between nginx, dovecot, postfix, postgresql, rspamd, unbound, rainloop, roundcube RUN pip3 install socrate -ENV ROUNDCUBE_URL https://github.com/roundcube/roundcubemail/releases/download/1.4.6/roundcubemail-1.4.6-complete.tar.gz +ENV ROUNDCUBE_URL https://github.com/roundcube/roundcubemail/releases/download/1.4.11/roundcubemail-1.4.11-complete.tar.gz -ENV CARDDAV_URL https://github.com/blind-coder/rcmcarddav/releases/download/v3.0.3/carddav-3.0.3.tar.bz2 +ENV CARDDAV_URL https://github.com/mstilkerich/rcmcarddav/releases/download/v4.1.2/carddav-v4.1.2.tar.gz RUN apt-get update && apt-get install -y \ zlib1g-dev libzip4 libzip-dev libpq-dev \ @@ -28,12 +28,8 @@ RUN apt-get update && apt-get install -y \ && echo date.timezone=UTC > /usr/local/etc/php/conf.d/timezone.ini \ && rm -rf /var/www/html/ \ && cd /var/www \ - && curl -L -O ${ROUNDCUBE_URL} \ - && curl -L -O ${CARDDAV_URL} \ - && tar -xf *.tar.gz \ - && tar -xf *.tar.bz2 \ - && rm -f *.tar.gz \ - && rm -f *.tar.bz2 \ + && curl -sL ${ROUNDCUBE_URL} | tar xz \ + && curl -sL ${CARDDAV_URL} | tar xz \ && mv roundcubemail-* html \ && mv carddav html/plugins/ \ && cd html \ From 2045ae2e10c37074966996c842bef4fa93df4538 Mon Sep 17 00:00:00 2001 From: Alexander Graf Date: Fri, 2 Jul 2021 22:47:51 +0200 Subject: [PATCH 2/2] updated changelog file --- towncrier/{UPDATE-ROUNDCUBE.feature => 1841.feature} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename towncrier/{UPDATE-ROUNDCUBE.feature => 1841.feature} (100%) diff --git a/towncrier/UPDATE-ROUNDCUBE.feature b/towncrier/1841.feature similarity index 100% rename from towncrier/UPDATE-ROUNDCUBE.feature rename to towncrier/1841.feature