Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 532844 - mail-client/roundcube-1.1.3 version bump
Summary: mail-client/roundcube-1.1.3 version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal with 2 votes (vote)
Assignee: Gentoo Web Application Packages Maintainers
URL:
Whiteboard:
Keywords:
: 539924 544604 (view as bug list)
Depends on:
Blocks:
 
Reported: 2014-12-17 14:33 UTC by Dennis Schridde
Modified: 2015-12-09 12:54 UTC (History)
11 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
roundcube-1.1.0.ebuild.diff (roundcube-1.1.0.ebuild.diff,709 bytes, patch)
2015-03-16 09:06 UTC, Conrad Kostecki
Details | Diff
roundcube-1.1.2.ebuild (roundcube-1.1.2.ebuild,2.03 KB, text/plain)
2015-08-05 19:13 UTC, Roland Hopferwieser
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Dennis Schridde 2014-12-17 14:33:29 UTC
"Roundcube Webmail 1.1-beta available": http://roundcube.net/news/2014/11/10/roundcube-webmail-1.1-beta-available/

Reproducible: Always
Comment 1 Sven 2015-02-11 12:06:25 UTC
Meanwhile roundcube 1.1 has left beta stage and has been released:
http://roundcube.net/news/2015/02/08/new-stable-version-1.1-released/
Comment 2 Philippe Chaintreuil 2015-02-25 12:12:07 UTC
It should be noted that Roundcube 1.1.0 has increased it's PHP requirement to >=5.3.7.
Comment 3 Jeroen Roovers (RETIRED) gentoo-dev 2015-03-15 13:03:51 UTC
*** Bug 539924 has been marked as a duplicate of this bug. ***
Comment 4 Conrad Kostecki gentoo-dev 2015-03-16 09:06:24 UTC
Created attachment 399016 [details, diff]
roundcube-1.1.0.ebuild.diff

As the current php 5.3 series in portage is 5.3.29, there shouldn't be any problems with the requirement of >=5.3.7.

I've modified the eBuild for 1.1.0, attaching the diff. That one is working for me.

The only difference is, that I've removed the removal of the bundled PEAR packages, because they seem not be presend in the 1.1.0 tar.
Comment 5 Jeroen Roovers (RETIRED) gentoo-dev 2015-03-27 07:07:41 UTC
*** Bug 544604 has been marked as a duplicate of this bug. ***
Comment 6 Thomas Raschbacher gentoo-dev 2015-03-31 12:06:27 UTC
any updates on this? I was just considering upgrading ;)
Comment 7 Dennis Schridde 2015-03-31 13:42:35 UTC
(In reply to Thomas Raschbacher from comment #6)
> any updates on this? I was just considering upgrading ;)

The patch from comment #4 works (for 1.1.1, too).
Comment 8 Philippe Chaintreuil 2015-03-31 13:44:42 UTC
I just upgrade via Conrad Kostecki's patch to 1.1.1 and it seems to be working.

Two things I noticed, but probably can just go in separate bugs for future tweaking.  I'm going to spam them here so I don't forget about them.


1.)  During webapp-config upgrade:

===========================================================
* Upgrading /roundcube-1.0.5 to /roundcube-1.1.1
*   Installed by root on 2015-02-11 13:17:40
*   Config files owned by 0:0
   ... *snip* ...
*   Creating required directories
*   Linking in required files
*     This can take several minutes for larger apps
*   Files and directories installed
/bin/sh: ./bin/update.sh: Permission denied
===========================================================

Not sure why that update script had permission denied, I was running as root via sudo.  Perhaps wrong working directory for the relative path?  Further, ${ROUNDCUBE_ROOT}/bin/update.sh isn't a sh script, it's PHP (although it does have a "#!/usr/bin/env php" line).

2.)  There's some new optional 3rd-party PHP dependency tracking & management package:  http://trac.roundcube.net/wiki/Howto_Upgrade#Updatingto1.1.0

It probably doesn't matter since portage has the dependencies, but the referenced composer.json-dist file (which seems to be installed by our current ebuilds) does have requirements that may be helpful.
Comment 9 Dennis Schridde 2015-03-31 14:51:40 UTC
The update.sh script is indeed no Shell- but a PHP-script. And it is missing the executable permissions, which is why you get "permission denied". Run chmod +x.
Comment 10 Philippe Chaintreuil 2015-03-31 15:49:06 UTC
I'm not sure where's it's being called from via webapp-config.  I don't see any mention to update.sh outside of the pkg_postinst() ewarn lines.  Anybody with more webapp-config knowledge know where this might be being triggered from?
Comment 11 Jean-Claude Repetto 2015-05-15 08:39:45 UTC
With the vhosts USE flag disabled, roundcube should be installed in the web server document root (/var/www/localhost/htdocs).
This ebuild does not solve bug #524192 .
With the proposed ebuild and -vhosts, I am not able to install roundcube. Does anybody know a workaround ?
Comment 12 Philippe Chaintreuil 2015-06-17 21:33:12 UTC
1.1.2 has been released: https://bugs.gentoo.org/show_bug.cgi?id=532844

The security-related fixes in particular are:

    XSS vulnerability in _mbox argument
    security improvement in contact photo handling
    potential info disclosure from temp directory
Comment 13 Roland Hopferwieser 2015-08-05 19:13:54 UTC
Created attachment 408352 [details]
roundcube-1.1.2.ebuild

Ebuild for 1.1.2.

Runs the post install to link to /var/www/localhost/htdocs if USE=-vhosts set.
Comment 14 Conrad Kostecki gentoo-dev 2015-09-15 08:19:23 UTC
roundcube 1.1.3 is released
Comment 15 Paul Brand 2015-09-23 14:12:21 UTC
(In reply to Roland Hopferwieser from comment #13)
> Created attachment 408352 [details]
> roundcube-1.1.2.ebuild
> 
> Ebuild for 1.1.2.
> 
> Runs the post install to link to /var/www/localhost/htdocs if USE=-vhosts
> set.

This ebuild also works for roundcube 1.1.3.
Comment 16 Paul Brand 2015-10-27 08:42:57 UTC
When is this ebuild going to be added to the portage tree?
Comment 17 Stefan Triller 2015-12-03 09:48:32 UTC
*push*

What is the status on this? Don't we have a maintainer for roundcube anymore? If so, it should be removed from portage...

Otherwise, roundcube 1.1. was released in february 2015 and we now have december and are still on 1.0., so please add this ebuild to the tree, or at least say where the problem is of not adding it so far...
Comment 18 Aaron W. Swenson gentoo-dev 2015-12-04 20:06:33 UTC
(In reply to Stefan Triller from comment #17)
> *push*
> 
> What is the status on this? Don't we have a maintainer for roundcube
> anymore? If so, it should be removed from portage...
> 
> Otherwise, roundcube 1.1. was released in february 2015 and we now have
> december and are still on 1.0., so please add this ebuild to the tree, or at
> least say where the problem is of not adding it so far...

I was just looking at this myself.

Although I'm not a fan of PHP, I now use Roundcube for my email and am a fan of it.

If the web-apps team isn't opposed, I'm willing to assume maintainership.
Comment 19 Aaron W. Swenson gentoo-dev 2015-12-08 12:55:16 UTC
Done in my repo:
https://github.com/titanofold/titanofold-gentoo-x86/commit/bed443febe021b7d1e526431878c6f2df1dc7a5e

You can use Layman to enable Portage access to my repo. Instructions are here: https://github.com/titanofold/titanofold-gentoo-x86

Try it out and let me know. (I haven't yet tried it on my server, but it installs fine on my local machine.)
Comment 20 Aaron W. Swenson gentoo-dev 2015-12-09 12:54:36 UTC
Done. And, I'm sorry, I forgot to thank Conrad Kostecki and Roland Hopferwieser for their work in the commit.

commit c20f39cdcba8d3f75fcd7d6c09e80d2ee0655e40
Author: Aaron W. Swenson <titanofold@gentoo.org>
Date:   Wed Dec 9 07:44:37 2015 -0500

    mail-client/roundcube: Version bump, security, and bug fixes
    
    Added two use flags controlling optional dependencies to support the
    enigma and and sieverules plugins.
    
    Added REQUIRED_USE as one of postgres, mysql, or sqlite must be
    enabled. Rouncube requires a database to operate. As the ebuild uses
    this now, removed the default enable on the mysql USE flag.
    
    Added POST-UPGRADE.txt which is just a shortened version of the
    UPGRADE text from upstream.
    
    Dropped arm and ppc64 keywords as one dependency,
    dev-php/PEAR-Net_LDAP2, currently lacks matching keywords for those
    architectures.
    
    Bug: 541172, 545096, 524192, 564476, 565204, 53284
    
    Package-Manager: portage-2.2.20.1