Roundcube 1.3.3 security release

The RoundCube project has recently discovered a file disclosure vulnerability in Roundcube Webmail.

Apparently this zero-day exploit is already being used by hackers to read Roundcube’s configuration files. It requires a valid username/password as the exploit only works with a valid session. More details will be published soon under CVE-2017-16651. RoundCube versions 1.1.x are affected by this vulnerability. However, versions 1.0.x, that are not affected by it, have been patched with the same fix as well.


We advise you to check your Roundcube installation to see if it has been compromised. Please check the Apache access logs (installdir/apache2/logs/access_log) for requests like:

?_task=settings&_action=upload-display&_from=timezone 

More information about this vulnerability can be found in the official announcement.

For new application deployments, including the Bitnami Launchpad, we have released Roundcube 1.3.3 installers, virtual machines and cloud images that include the security fixes to address this vulnerability. Users launching Bitnami Roundcube via a cloud marketplace are advised to select version 1.3.3, once it is published.

If you have further questions about this security issue or about Bitnami Roundcube, please post to our community forum. Our support team will be happy to help you there!

Roundcube now available in BitNami

Roundcube was the latest winner of the BitNami bi-weekly packaging contest and we are happy to announce that it is already available as part of the BitNami library.

You can now download free, ready to run native installers for Windows, OS X and Linux, virtual machines and Azure and Amazon EC2 images for Roundcube.

For those of you not familiar with this popular app, Roundcube is a modern webmail solution for managing your emails, similar to GMail, that you can host on your own servers. Some of its features include MIME support, address book, folder manipulation, message searching and spell checking.

You can also now launch a free cloud demo server with the BitNami Cloud Launchpad by clicking the launch button below. This server was configured with GMail by default. You can log in with a GMail account to start using it.

Thomas Bruederli, the Lead Developer and Project Administrator of Roundcube, was kind enough to answer some questions about his project.


1. What is the goal of the Roundcube application?

Roundcube aims to be a state-of-the-art webmail application that can be put on top of every standard email server and which is free to use and can easily be extended.

2. What are some of the features of Roundcube?

As the name states, the core features are everyday email reading and writing. For the use in corporate or institutional environments, Roundcube also integrates LDAP address books. Thanks to the plugin architecture one can choose from a broad variety of plugins that add further features such as calendar, task management, message filters or synchronization.

3. Which projects or organizations are using Roundcube currently?  What kind of projects do they use it for?

There are several American Universities using Roundcube for their campus or department email service, the largest deployment known is at University of Michigan serving 70K users. But also many internet service providers around the world meanwhile offer Roundcube by default for their paying hosting customers. Finally, Roundcube became the web client of the open source groupware solution Kolab which is a powerful competitor in the groupware market.

4. What do you expect will be the main benefits of having BitNami packages available for Roundcube?

Although the installation of Roundcube is rather simple, having it packaged and pre-configured will hopefully make it even easier for people to give it a try. Since the Roundcube software is still pretty young and under heavy development, we also expect to open a proper update channel with the BitNami packages.


Would you like your favorite app to be part of BitNami? Be sure to suggest and vote for it in our contest!

RoundCube: The Latest BitNami Contest Winner

Congrats to the RoundCube team! The RoudCube application is the new winner of the bi-weekly packaging contest. It has been chosen by our users to be added to the BitNami library.

RoundCube is like having your own private GMail: a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking.

RoundCube Webmail

As with all BitNami apps, we will provide free RoundCube installers, virtual machines and cloud images for the Amazon and Windows Azure clouds. 

Thanks to the community votes, we also recently released Horde Groupware Webmail in BitNami. Horde is a browser-based communication suite, where users can read, send and organize email messages and manage and share calendars, contacts, tasks and notes. If you are interested in a Webmail platform you can try Horde easily downloading the Horde Groupware Webmail installers, virtual machines or you can instantly launch a free cloud demo server.

Would you like to have your favorite app as part of BitNami? Make sure to suggest and vote for it in our contest!