[From nobody Sun Jul 5 17:07:07 2026 Received: (at submit) by bugs.debian.org; 28 May 2026 08:27:01 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-17.1 required=4.0 tests=BAYES_00, BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU, DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD,HAS_PACKAGE,SPF_HELO_PASS, SPF_PASS,WEBMAIL,WORD_WITHOUT_VOWELS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 108; hammy, 150; neutral, 283; spammy, 0. spammytokens: hammytokens:0.000-+--HTo:N*Debian, 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking, 0.000-+--HTo:N*System, 0.000-+--HTo:N*Bug Return-path: <vladki@mzk.cz> Received: from mail.mzk.cz ([195.113.155.102]:53084 helo=bupu-new.mzk.cz) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <vladki@mzk.cz>) id 1wSW4x-00CJ8L-2f for submit@bugs.debian.org; Thu, 28 May 2026 08:27:01 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mzk.cz; s=dkim; h=Sender:Date:Message-ID:Subject:To:From:Content-Transfer-Encoding: MIME-Version:Content-Type:In-Reply-To:References:Reply-To:Cc:Content-ID: Content-Description; bh=qTuL6Tm/s5y8LiRHwZLzTTp+Zl7PxisTr6I0VueXW6A=; b=PuKaV X9bbeM1KASIzbGtwYLdJ3Y7xsM6xb6Jewi/NOGRMNemHHwTxoHeTD7h9yfo13aJvWG6lJcdsjFOUv TCwVgyMU/pIQzBT2iE0nXmjZuLYL/evTyg4t5z1Y7MZAsithyBCbVfvifAYi2mwvko75Y4La8T2vM vJiJBOISMNSQWy052Zy4aylRvAJzbrmU/3Q5dsGFdCMh+K52Nx1s7bR/hMnulv1enGvoMAKhlO4HU +VrLVNiJ5Y4CvbyyZMgOmtQem3JqDSHENAvM9H8n1jKHAVUgVFEDKuhSolf03KqhOaqIuEj/J6tm+ wo9Mt5dM85hbAOrt1NIjGwHrTfz7Q==; Received: from vladki by bupu-new.mzk.cz with local (Exim 4.96) (envelope-from <vladki@mzk.cz>) id 1wSVmN-0007ei-2o; Thu, 28 May 2026 10:07:47 +0200 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Vladislav Kurz <vladki@mzk.cz> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: roundcube: DSA 6301-1 breaks roundcube Message-ID: <177995566786.29034.4180568629571857119.reportbug@bupu-new.mzk.cz> X-Mailer: reportbug 12.0.0 Date: Thu, 28 May 2026 10:07:47 +0200 Sender: Vladislav Kurz <vladki@mzk.cz> X-Greylist: delayed 1146 seconds by postgrey-1.37 at buxtehude; Thu, 28 May 2026 08:27:00 UTC Delivered-To: submit@bugs.debian.org Package: roundcube Version: 1.6.5+dfsg-1+deb12u9 Severity: important Dear Maintainer, *** Reporter, please consider answering these questions, where appropriate *** * What led up to the situation? Installing security update DSA 6301-1 on debian 12 * What exactly did you do (or not do) that was effective (or ineffective)? apt-get update; apt-get upgrade. Error during upgrade: PHP Parse error: syntax error, unexpected '|', expecting ';' or '{' in /usr/share/roundcube/program/lib/Roundcube/rcube_utils.php on line 431 Fatal error: Please check the Roundcube error log and/or server error logs for more information. * What was the outcome of this action? Webmail does not work : Oops... something went wrong! An internal error has occurred. Your request cannot be processed at this time. For administrators: Please check the application and/or server error logs for more information. apache error log is full of [Thu May 28 10:06:47.523141 2026] [php7:error] [pid 26433:tid 26433] [client 10.3.20.97:62510] PHP Parse error: syntax error, unexpected '|', expecting ';' or '{' in /usr/share/roundcube/program/lib/Roundcube/rcube_utils.php on line 431 Running php 7.4 * What outcome did you expect instead? *** End of the template - remove these template lines *** -- System Information: Debian Release: 12.14 APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 'oldstable') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-48-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=cs_CZ.UTF-8, LC_CTYPE=cs_CZ.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to C.UTF-8), LANGUAGE=en_US:en Shell: /bin/sh linked to /usr/bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages roundcube depends on: ii dpkg 1.21.23 ih roundcube-core 1.6.5+dfsg-1+deb12u9 roundcube recommends no packages. roundcube suggests no packages. Versions of packages roundcube-core depends on: ii dbconfig-common 2.0.24 ii debconf [debcon 1.5.82 f-2.0] ii dpkg 1.21.23 ii libapache2-mod- 8.2.31-1~deb12u1 php8.2 [php-jso n] ii libjs-bootstrap 4.6.1+dfsg1-4+deb12u1 4 ii libjs-codemirro 5.65.0+~cs5.83.9-2 r ii libjs-jquery 3.6.1+dfsg+~3.5.14-1 ii libjs-jquery-mi 2.3.5+dfsg-4 nicolors ii libjs-jquery-ui 1.13.2+dfsg-1 ii libjs-jstimezon 1.0.7+~1.0.3-1 edetect ii libmagic1 1:5.44-3 ii php 2:8.2+93 ii php-auth-sasl 1.1.0-1 ii php-common 2:94+0~20240205.51+debian10~1.gbp6faa2e ii php-guzzlehttp- 7.4.5-1 guzzle ii php-intl 2:8.2+93 ii php-json 2:8.2+93 ii php-mail-mime 1.10.11-1 ii php-masterminds 2.7.6+dfsg-1 -html5 ii php-mbstring 2:8.2+93 ii php-net-sieve 1.4.6-1 ii php-net-smtp 1.10.1-1 ii php-pear 1:1.10.13+submodules+notgz+2022032202-2+0~20230612.39+debi an10~1.gbpfd4c1d ii php5.6 [php] 5.6.40-86+0~20250817.110+debian12~1.gbp00d7b7 ii php5.6-cli [php 5.6.40-86+0~20250817.110+debian12~1.gbp00d7b7 -cli] ii php5.6-json [ph 5.6.40-86+0~20250817.110+debian12~1.gbp00d7b7 p-json] ii php7.4 [php] 7.4.33-1+deb11u9 ii php7.4-cli [php 7.4.33-1+deb11u9 -cli] ii php7.4-intl [ph 7.4.33-1+deb11u9 p-intl] ii php7.4-json [ph 7.4.33-1+deb11u9 p-json] ii php7.4-mbstring 7.4.33-1+deb11u9 [php-mbstring] ii php8.2 [php] 8.2.31-1~deb12u1 ii php8.2-cli [php 8.2.31-1~deb12u1 -json] ii php8.2-intl [ph 8.2.31-1~deb12u1 p-intl] ii php8.2-mbstring 8.2.31-1~deb12u1 [php-mbstring] ii php8.2-phpdbg [ 8.2.31-1~deb12u1 php-json] ii roundcube-mysql 1.6.5+dfsg-1+deb12u9 ii ucf 3.0043+nmu1+deb12u1 Versions of packages roundcube-core recommends: ii apache2 [httpd-cgi] 2.4.67-1~deb12u2 ii php-enchant 2:8.2+93 ii php-gd 2:8.2+93 ii php7.4-gd [php-gd] 7.4.33-1+deb11u9 ii php8.2-enchant [php-enchant] 8.2.31-1~deb12u1 ii php8.2-gd [php-gd] 8.2.31-1~deb12u1 ii roundcube-skin-classic 1.6.0+ds-2 ii roundcube-skin-larry 1.6.0+ds-2 Versions of packages roundcube-core suggests: pn php-bacon-qr-code <none> pn php-bjeavons-zxcvbn-php <none> ii php-crypt-gpg 1.6.7-2 ii php-net-ldap3 1.1.4-1 pn php-roundcube-rtf-html-php <none> iu roundcube-plugins 1.6.5+dfsg-1+deb12u9 -- debconf information: * roundcube/language: cs_CZ roundcube/missing-db-package-error: abort * roundcube/mysql/method: Unix socket roundcube/dbconfig-remove: true roundcube/remove-error: abort * roundcube/reconfigure-webserver: apache2 roundcube/internal/reconfiguring: false * roundcube/db/app-user: roundcube@localhost roundcube/upgrade-error: abort * roundcube/db/dbname: roundcube3 * roundcube/restart-webserver: true * roundcube/mysql/authplugin: default roundcube/internal/skip-preseed: false roundcube/purge: false * roundcube/mysql/admin-user: debian-sys-maint * roundcube/database-type: mysql roundcube/remote/host: localhost roundcube/passwords-do-not-match: roundcube/upgrade-backup: true * roundcube/dbconfig-reinstall: false roundcube/remote/newhost: roundcube/install-error: abort roundcube/remote/port: * roundcube/dbconfig-install: true * roundcube/hosts: localhost:143 roundcube/dbconfig-upgrade: true ]