Package: roundcube
Version: 1.4.15+dfsg.1-1+deb11u8
Severity: grave
Justification: renders package unusable
Dear Maintainer,
after running a routine apt-get upgrade command the following packages were
updated:
Upgrade: libpng16-16:amd64 (1.6.37-3+deb11u2, 1.6.37-3+deb11u3),
roundcube-core:amd64 (1.4.15+dfsg.1-1+deb11u7, 1.4.15+dfsg.1-1+deb11u8),
roundcube:amd64 (1.4.15+dfsg.1-1+deb11u7, 1.4.15+dfsg.1-1+deb11u8),
roundcube-mysql:amd64 (1.4.15+dfsg.1-1+deb11u7, 1.4.15+dfsg.1-1+deb11u8)
On completion of the update attempts to access /roundcube/ logged the following
in my errors file:
PHP Parse error: syntax error, unexpected '[' in
/usr/share/roundcube/program/lib/Roundcube/rcube_utils.php on line 433,
I'm not a coder so I spun around this a bit pondering how to solve it. Not a
lot of useful stuff out there on Google.
For now the fix i've found - suggested by a friend - was to modify
rcube_utils.php and comment out the whole subsection around line 433.
430 #if (defined('AF_INET6')) {
431 # /* IPv4-compatible and IPv4-mapped IPv6 addresses
(RFC4291 2.5.5) */
432 # foreach (['::', '::ffff:'] as $prefix) {
433 # foreach ($nets as [$range_start, $range_end]) {
434 # $nets[] = [ $prefix . $range_start, $prefix .
$range_end ];
435 # }
436 # }
437 # $nets[] = ['::1', '::1'];
438 # $nets[] = ['fc00::',
'fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff'];
439 #}
440
441 #foreach ($nets as [ $range_start, $range_end ]) {
442 # $range_start = @inet_pton($range_start);
443 # $range_end = @inet_pton($range_end);
444 # if (strcmp($range_start, $address) <= 0 &&
strcmp($range_end, $address) >= 0) {
445 # return true;
446 # }
447 #}
The roundcube team have indicated this appears to be an issue introduced in the
debian package specifically.
Refer: https://github.com/roundcube/roundcubemail/issues/10138
I'm not sure why roundcube wants knowledge of RFC1918 and 4291 and how this
changes the user experience, to be honest, but i'm happy to live without it.
I'm going to have to migrate my services up from bullseye in the next several
weeks (it goes out of LTS in August) but have no guarantees that this problem
won't persist on the machine post dist-upgrade.
Insights from the experts welcomed, including whether this is something that'll
simply 'go away' upon future update (recognising I am still using oldoldstable).
Thanks.
-- System Information:
Debian Release: 11.11
APT prefers oldoldstable-updates
APT policy: (500, 'oldoldstable-updates'), (500, 'oldoldstable-security'),
(500, 'oldoldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-25-amd64 (SMP w/1 CPU thread)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ (charmap=ISO-8859-1), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages roundcube depends on:
ii dpkg 1.20.13
ii roundcube-core 1.4.15+dfsg.1-1+deb11u8
roundcube recommends no packages.
roundcube suggests no packages.
Versions of packages roundcube-core depends on:
ii dbconfig-common 2.0.19
ii debconf [debconf-2.0] 1.5.77
ii dpkg 1.20.13
ii libapache2-mod-php7.4 [libapache2-mo 7.4.33-1+deb11u10
ii libjs-bootstrap4 4.5.2+dfsg1-8~deb11u2
ii libjs-codemirror 5.59.2+~cs0.23.109-1
ii libjs-jquery 3.5.1+dfsg+~3.5.5-7
ii libjs-jquery-minicolors 2.2.6+dfsg-4
ii libjs-jquery-ui 1.12.1+dfsg-8+deb11u2
ii libjs-jstimezonedetect 1.0.6-5
ii libmagic1 1:5.39-3+deb11u1
ii php 2:7.4+76
ii php-auth-sasl 1.1.0-1
ii php-common 2:76
ii php-intl 2:7.4+76
ii php-mail-mime 1.10.10-1
ii php-masterminds-html5 2.7.4+dfsg-2
ii php-mbstring 2:7.4+76
ii php-net-sieve 1.4.4-2
ii php-net-smtp 1.9.0-1
ii php-net-socket 1.2.2-2
ii php-pear 1:1.10.12+submodules+notgz+20210212-1
ii php7.4 [php] 7.4.33-1+deb11u10
ii php7.4-cli [php-cli] 7.4.33-1+deb11u10
ii php7.4-intl [php-intl] 7.4.33-1+deb11u10
ii php7.4-json [php-json] 7.4.33-1+deb11u10
ii php7.4-mbstring [php-mbstring] 7.4.33-1+deb11u10
ii roundcube-mysql 1.4.15+dfsg.1-1+deb11u8
ii ucf 3.0043+deb11u2
Versions of packages roundcube-core recommends:
ii apache2 [httpd-cgi] 2.4.66-1~deb11u1
pn php-pspell <none>
ii php7.4-fpm [php-fpm] 7.4.33-1+deb11u10
ii php7.4-gd [php-gd] 7.4.33-1+deb11u10
Versions of packages roundcube-core suggests:
pn php-crypt-gpg <none>
pn php-mkopinsky-zxcvbn-php <none>
pn php-net-ldap3 <none>
pn roundcube-plugins <none>
-- debconf information:
* roundcube/mysql/admin-user: debian-sys-maint
roundcube/remote/port:
roundcube/db/basepath:
* roundcube/upgrade-backup: true
roundcube/restart-webserver: true
roundcube/upgrade-error: retry
roundcube/pgsql/changeconf: false
roundcube/passwords-do-not-match:
roundcube/install-error: abort
roundcube/reconfigure-webserver: apache2, lighttpd
roundcube/internal/skip-preseed: false
roundcube/internal/reconfiguring: false
roundcube/remote/host: localhost
roundcube/pgsql/manualconf:
roundcube/pgsql/authmethod-user: password
* roundcube/db/dbname: roundcube
roundcube/dbconfig-remove: true
* roundcube/dbconfig-upgrade: true
roundcube/dbconfig-reinstall: false
roundcube/hosts:
roundcube/remove-error: abort
* roundcube/db/app-user: roundcube@localhost
* roundcube/mysql/method: Unix socket
roundcube/mysql/authplugin: default
roundcube/pgsql/method: TCP/IP
roundcube/language: en_US
roundcube/missing-db-package-error: abort
* roundcube/dbconfig-install: true
roundcube/remote/newhost:
roundcube/pgsql/authmethod-admin: ident
roundcube/pgsql/admin-user: postgres
roundcube/pgsql/no-empty-passwords:
roundcube/purge: false
* roundcube/database-type: mysql
