Over 84,000 #Roundcube instances vulnerable to actively exploited flaw
#roundcube
0 posts0 participants0 posts today
Jeg har brukt epost med #Roundcube på #Domeneshop en stund nå, men vurderer å gå over til @protonprivacy.
Det har visst vært litt kontrovers rundt en uttalelse fra lederen der (se feks https://medium.com/@ovenplayer/does-proton-really-support-trump-a-deeper-analysis-and-surprising-findings-aed4fee4305e), men organisasjonen virker ikke akkurat som en ihugga MAGA-gjeng. Og produktene ser veldig gode ut.
Noen tanker? Eller erfaringer med eget domene på #ProtonMail?
#epost #mail #proton
Medium · Does Proton really support Trump? A deeper analysis (and surprising findings)
pour celles et ceux qui ont déployé des roundcube il va falloir faire la mise à jour rapidement
https://thehackernews.com/2025/06/critical-10-year-old-roundcube-webmail.html
#Roundcube 1.5.10 (#LTS) has been released (#Webmail / #Mail / #IMAP / #SMTP / #LDAP / #Managesieve / #PHP / #MariaDB / #MySQL / #PostgreSQL / #SQLite / #OracleDB / #MSSQL / #LongTermSupport) https://roundcube.net/
roundcube.netRoundcube - Free and Open Source Webmail SoftwareFree and open source webmail software for the masses, written in PHP
#Roundcube 1.6.11 (stable) has been released (#Webmail / #Mail / #IMAP / #SMTP / #LDAP / #Managesieve / #PHP / #MariaDB / #MySQL / #PostgreSQL / #SQLite / #OracleDB / #MSSQL) https://roundcube.net/
roundcube.netRoundcube - Free and Open Source Webmail SoftwareFree and open source webmail software for the masses, written in PHP
Sourcehut created a plain text email guide.
CONTENTS
Recommended email clients for plain text users.
How to set up plain text with other email clients.
Etiquette recommendations for plain text emails.
Why is plain text better than HTML?
Recommendations for software which sends emails.
Website: https://useplaintext.email
Replied in thread
@ueeu You might like to include @disroot in your 2 lists (#Akkoma is a part of #Fediverse social network, like #Mastodon). #Roundcube #SearxNG
Dis Mastodon ... Une alternative plus ergonomique et agréable à #Roundcube pour ma messagerie hébergée sur mon serveur, tu as des idées ?
Merci !
A new version of Roundcube Photos has been released. New in 1.5.6 is the feature to share images with Mastodon, including multiple images. The manual generation of tokens has been removed, as the plugin now logs on to a Mastodon or Pixelfed instance as an autonomous app. The Timeline view and various internal improvements and bug fixes are also new. You can find the new version, as usual, on https://codeberg.org/Offerel/Roundcube_Pictures
#travelphotography #photography #roundcube #photos #mastodon #pixelfed
@Mastodon
Codeberg.orgRoundcube_PicturesA free Photo Gallery Plugin for Roundcube like Google Photos, OneDrive or Amazon Photos.
@nopatience @mwl try to do it in a day - sshould be possible,,,email is rough and complicated - the book will help #roundcube
I've been running my own #email servers for over two decades now, with spurts of enthusiasm and improvement. The last project has been to run the various software parts in immutable containers on #Kubernetes, and I'm quite happy with the result. I do see a decline in requests for hosted accounts on personal domains, as friends and family seem to settle with accounts on major providers like Gmail. I'm not going to throw in the towel though. Self hosted for the win!
For the curious, my stack is #Postfix, #Rspamd, #Dovecot and #Roundcube for those who prefer webmail over a native client like #Thunderbird or #K9mail. #Sieve for automatically organizing mail in the proper folders. Used to run #PostfixAdmin, but was unhappy with it, so I wrote my own API in Go to edit accounts, mailboxes and aliases. Never got around to write a frontend, but it was a Swagger interface, so.. 
Replied in thread
I am *extremely* biased here. I have giant hands and loathe mobiles.
But I use it much the same way you do! #roundcube for easy attachment management & emergency checks, mutt as a daily driver.
Ich habe eine interessante Auflistung von Anleitungen von OpenSource Software gefunden. Sicherlich ist manches spezifisch für die Institution.
https://www.solidarische-landwirtschaft.org/intern/technik
Viele Themen sind aber universelles Wissen: #Nextcloud, #RoundCube, #Thunderbird, BigBlueButton, neu für mich @pretix, #Typo3 und #Mattermost
www.solidarische-landwirtschaft.orgTechnik :: Netzwerk Solidarische Landwirtschaft
Continued thread
Why you should care about CVE-2023-43770:
ESET Research previously reported on 25 October 2023 that the Winter Vivern APT was exploiting a similar RoundCube cross-site scripting vulnerability CVE-2023-5631 as a zero-day against European overnmental entities and a think tank.
www.welivesecurity.comWinter Vivern exploits zero-day vulnerability in Roundcube Webmail serversESET Research discover campaigns by the Winter Vivern APT group that exploit a zero-day XSS vulnerability in the Roundcube Webmail server and target governmental entities and a think tank in Europe.
CISA adds CVE-2023-43770 (6.1 medium) Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability to the Known Exploited Vulnerabilities (KEV) Catalog.
https://www.cisa.gov/news-events/alerts/2024/02/12/cisa-adds-one-known-exploited-vulnerability-catalog
Cybersecurity and Infrastructure Security Agency CISACISA Adds One Known Exploited Vulnerability to Catalog | CISA
Replied in thread
@EllaMadelineK You can use @nextcloud for cloud storatge and sharing. @jellyfin for media streaming and #sogo or #roundcube for webmail.
For content fetching to stream over Jellyfin, you can setup #radarr radarr.video
If you use #NameCheap hosting, a new round of #phishing emails are happening that make it appear you need to respond due to #RoundCube issues. Be careful.
To refresh, recently, there was a major RoundCube hack across the globe with different service providers, not just NameCheap.
The round that is going on now is using the NameCheap logo and color scheme. #infosec #security
#Opensource #email pioneer #Roundcube joins the #Nextcloud family
In boosting Nextcloud's #webmail software capabilities, Roundcube is joining Nextcloud as what's been described as a merger. In 2024 Nextcloud is to invest into Roundcube to accelerate the development of this widely-used webmail open-source software. Today's press release says Roundcube will not replace Nextcloud Mail with at least no plans for merging the two in the short-term. https://www.phoronix.com/news/Roundcube-Nextcloud
#Roundcube is now trending across Mastodon
Open Source Email Pioneer Roundcube Joins the Nextcloud Family: https://nextcloud.com/blog/open-source-email-pioneer-roundcube-comes-aboard-nextcloud/ #linux #update #foss #nextcloud #imap #email #roundcube
Nextcloud · Open source email pioneer Roundcube joins the Nextcloud family - NextcloudBecoming a new steward for Roundcube, Nextcloud sets sail to foster the growth and improvement of the project.