mail/roundcube 1.7.5,1 MidnightBSD

Fully skinnable XHTML/CSS webmail written in PHP

System: MidnightBSD
Repository: mports
Maintainer: [email protected]
Last update: 2026-10-20
Commit: fb8958f415
License: gpl3+
Categories: mail, www

Description

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation and message filters. RoundCube Webmail is written in PHP and requires the MySQL database. The user interface is fully skinnable using XHTML and CSS 2.

In the other systems

System

Port

Version

MidnightBSD

mail/roundcube

1.7.5,1

FreeBSD

mail/roundcube

1.7.5,1

NetBSD

mail/roundcube

1.6.19

DragonFly

mail/roundcube

1.6.11,1

HardenedBSD

mail/roundcube

1.7.4,1

GhostBSD

mail/roundcube

1.7.4,1

Install

Binary package:

mport install roundcube${PHP_PKGNAMESUFFIX}

From mports:

cd /usr/mports/mail/roundcube && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	roundcube${PHP_PKGNAMESUFFIX}>0:mail/roundcube

Dependencies

Required by 3

Configuration

Options name: mail_roundcube

Option

Default

Description

DOCS

off

EXAMPLES

off

Enable GD support (image conversion)

LDAP

off

Enable LDAP support (address book)

MYSQL

off

Use MySQL backend

NSC

off

Install network spellchecker

PGSQL

Use PostgreSQL backend

PSPELL

off

Enable PSpell support (internal spellcheck)

SQLITE

off

Use SQLite backend

USES: cpe php:web,flavors
Service scripts: none

Files

distinfo 1

File

Size

SHA256

roundcubemail-1.7.5-complete.tar.gz

6.44433e+06

93a66c94e3efff7db93187c1c9d7f35546647a3e1e7b9327cc87911564edf9d1

Master sites 1

https://github.com/roundcube/roundcubemail/releases/download/1.7.5/

Commit history 3

Date Commit Credits Log message

2026-10-20 fb8958f415 Lucas Holt mail/roundcube: update to 1.7.5 [security] (#1848)

2026-08-10

7c0009a897

Lucas Holt

mail/roundcube: update to 1.7.3 [security] (#735)

Update `mail/roundcube` from 1.7.2 to 1.7.3 — **security release**, published upstream 2026-08-09. > **Note:** FreeBSD has not picked up 1.7.3 yet (their tree is still on 1.7.2 as of 2026-08-10), so unlike the 1.7.2 bump there is no reference port to diff against. Everything here was verified directly against the upstream tarball. ## What it fixes Upstream lists eleven vulnerabilities. The severe ones: - **RCE** via the `cmd_learn` driver of the markasjunk plugin (reported by nept1337) - **IMAP command injection** via mail search and LITERAL+ byte-count desynchronization (Zach Hanley, Horizon3.ai) - **LDAP filter injection** via unescaped `%u`/`%fu`/`%d` substitution into `search_filter` (Milan Hoppe) - **Arbitrary Sieve script injection** via a filter rule name bypassing …

2026-08-07

f00efc8adb

Lucas Holt

mail/roundcube: update to 1.7.2 (#702)

Update `mail/roundcube` from 1.6.16 to 1.7.2. This is a minor-version jump, not a patch bump. ## Real breakage found 1.7.2 no longer ships a top-level `.htaccess`, but mports carried it in `RCUBECOMP` (FreeBSD never did). `COPYTREE_SHARE` on a missing source would have failed `do-install`. Each `RCUBECOMP` member was verified with `test -e`; only `.htaccess` was missing, so it was dropped. The four **nested** `.htaccess` files (`config/`, `logs/`, `public_html/`, `temp/`) are still collected by the recursive `FIND`, so nothing is lost from the package. This isn't discarding mports delta — the delta had gone stale. ## Patch set Both patches were 1.6-era and would **not** have applied to 1.7.2 (`patch-config_defaults.inc.php` was pinned at `@@ -739` with 2017 …