Question Updated Version of Roundcube That Supports PHP Version 8.5

[slabar]

Server operating system version

Rocky Linux 8.10 (Green Obsidian)

Plesk version and microupdate number

Plesk Obsidian 18.0.81 Update #4 Web Host Edition

I know that y'all have addressed the PHP Security issue on Plesk. However, we had to uninstall PHP version 8.3 due to this and it also uninstalled the included Plesk Roundcube version.

I have several clients that use Roundcube for their email and need a resolution to this issue ASAP, as I am sure other users do as well.

So my question is this: How FAST will an updated version of Roundcube be released that supports PHP Version 8.5?!?

And No, waiting two updates from now is not a viable answer nor solution.

 

[Kaspar]

See: Question - ETA for Roundcube 1.6.20? (20 security fixes)

 

[slabar]

See: Question - ETA for Roundcube 1.6.20? (20 security fixes)

Again, as per my post THIS DOES NOT HELP AND IS NOT AN ACCEPTABLE answer given the recent security breach in PHP!!!

 

[King555]

PHP 8.3 is still supported by the PHP developers a year and 2 months from now, I guess even longer by Plesk and many web hosters. So why uninstall it now?

But I also would like to get rid of PHP 8.3 and have a Roundcube version which at least supports PHP 8.4. Not because of security, but it looks "cleaner" then (I have no sites which need 8.3).

 

[Martin Dias]

given the recent security breach in PHP

PHP 8.3 was patched same time as PHP 8.5

 

[Mehl]

Also, roundcube 1.6 is the current LTS release.
1.6.20 was released to plesk today. see Tools & Settings -> Plesk -> Updates

 

[slabar]

Also, roundcube 1.6 is the current LTS release.
1.6.20 was released to plesk today. see Tools & Settings -> Plesk -> Updates

Thank you, I saw that this morning. Personally, I hate having multiple PHP versions on my server for this exact reason. I don't understand why Plesk ties Roundcube to just one PHP version when Roundcube itself isn't tied to a single version.

 

[slabar]

PHP 8.3 was patched same time as PHP 8.5

PHP 8.3 is still supported by the PHP developers a year and 2 months from now, I guess even longer by Plesk and many web hosters. So why uninstall it now?

But I also would like to get rid of PHP 8.3 and have a Roundcube version which at least supports PHP 8.4. Not because of security, but it looks "cleaner" then (I have no sites which need 8.3).

Personally, I hate having multiple PHP versions on my server for this exact reason. I don't understand why Plesk ties Roundcube to just one PHP version when Roundcube itself isn't tied to a single version.

 

[Mehl]

but roundcube's current LTS Version is bound to (max) 8.3. That's not tied to it by Plesk.
I can understand why they stick with the LTS.

Also: having PHP 8.3 on your server won't harm it. Are you running out of space? Don't worry about that.

 

[slabar]

but roundcube's current LTS Version is bound to (max) 8.3. That's not tied to it by Plesk.
I can understand why they stick with the LTS.

Also: having PHP 8.3 on your server won't harm it. Are you running out of space? Don't worry about that.

Ha ha. I missed that they use LTS. Most likely because this is what shows in the About Section [Roundcube Webmail 1.6.20 | Copyright © 2005-2025, The Roundcube Dev Team].

I was under the impression that they used the Stable Versions. Thank you for the clarification.

As for PHP 8.3, it's just a preference not to use older software and to avoid multiple versions on my machine.