[Pkg-roundcube-maintainers] Bug#883620: roundcube: Since the last upgrade, attachment can't be sent anymore

[Jean-Philippe Guérard]

Package: roundcube
Version: 1.2.3+dfsg.1-4+deb9u1
Severity: normal

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

     Latest Roundcube upgrade

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

     Send a message with an attachment.

   * What was the outcome of this action?

     The attachment is not on the sent message, neither on the
     stored copy in the sent folder.

   * What outcome did you expect instead?

     Attachement sent and stored in the sent folder.

*** End of the template - remove these template lines ***

I get the following error in my log files :

Dec  5 20:17:59 xxxxxxxx roundcube: <chee9j34> PHP Error: toto can't read /tmp/rcmAttmntjoFOF5 (not in temp_dir) in /usr/share/roundcube/plugins/filesystem_attachments/filesystem_attachments.php on line 216 (POST /roundcube/?_task=mail&_unlock=loading1512501479300&_lang=fr&_framed=1&_action=send)

The temp_dir variable is the default:
$config['temp_dir'] = RCUBE_INSTALL_PATH . 'temp/';

So, the problem is that the temp file is created in /tmp, and, since it's not
in the Roundcube configured temp dir (/var/lib/roundcube/temp), roundcube removes it...

Configuring the temp_dir variable to /tmp/ solves the issue:
$config['temp_dir'] = '/tmp/';

-- System Information:
Debian Release: 9.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages roundcube depends on:
ii  dpkg            1.18.24
ii  roundcube-core  1.2.3+dfsg.1-4+deb9u1

roundcube recommends no packages.

roundcube suggests no packages.

Versions of packages roundcube-core depends on:
ii  dbconfig-common                             2.0.8
ii  debconf [debconf-2.0]                       1.5.61
ii  dpkg                                        1.18.24
ii  libapache2-mod-php                          1:7.0+49
ii  libapache2-mod-php7.0 [libapache2-mod-php]  7.0.19-1
ii  libmagic1                                   1:5.30-1+deb9u1
ii  php-auth-sasl                               1.0.6-3
ii  php-cli                                     1:7.0+49
ii  php-common                                  1:49
ii  php-intl                                    1:7.0+49
ii  php-mail-mime                               1.10.0-2
ii  php-mcrypt                                  1:7.0+49
ii  php-net-smtp                                1.7.1-2
ii  php-net-socket                              1.0.14-2
ii  php-pear                                    1:1.10.1+submodules+notgz-9
ii  php7.0-cli [php-cli]                        7.0.19-1
ii  php7.0-intl [php-intl]                      7.0.19-1
ii  php7.0-json [php-json]                      7.0.19-1
ii  php7.0-mcrypt [php-mcrypt]                  7.0.19-1
ii  roundcube-pgsql                             1.2.3+dfsg.1-4+deb9u1
ii  ucf                                         3.0036

Versions of packages roundcube-core recommends:
ii  php-gd                      1:7.0+49
ii  php-pspell                  1:7.0+49
ii  php7.0-gd [php-gd]          7.0.19-1
ii  php7.0-pspell [php-pspell]  7.0.19-1
ii  spawn-fcgi                  1.6.4-1+b1

Versions of packages roundcube-core suggests:
pn  php-crypt-gpg      <none>
pn  php-net-ldap2      <none>
pn  php-net-ldap3      <none>
ii  roundcube-plugins  1.2.3+dfsg.1-4+deb9u1

-- debconf information:
  roundcube/restart-webserver: true
  roundcube/pgsql/manualconf:
  roundcube/dbconfig-remove: true
  roundcube/language: fr_FR
  roundcube/pgsql/no-empty-passwords:
  roundcube/purge: false
  roundcube/remote/port:
  roundcube/mysql/method: Unix socket
  roundcube/install-error: ignore
* roundcube/db/app-user: roundcube at localhost
* roundcube/pgsql/authmethod-admin: ident
  roundcube/internal/skip-preseed: false
* roundcube/dbconfig-install: false
  roundcube/mysql/admin-user:
  roundcube/db/basepath:
* roundcube/dbconfig-upgrade: true
  roundcube/hosts:
  roundcube/dbconfig-reinstall: false
* roundcube/upgrade-backup: true
  roundcube/remote/host: localhost
  roundcube/pgsql/changeconf: false
* roundcube/upgrade-error: ignore
  roundcube/internal/reconfiguring: false
  roundcube/remove-error: abort
  roundcube/remote/newhost:
* roundcube/pgsql/authmethod-user: password
* roundcube/pgsql/admin-user: postgres
* roundcube/pgsql/method: Unix socket
  roundcube/missing-db-package-error: abort
* roundcube/db/dbname: roundcube
  roundcube/reconfigure-webserver: apache2, lighttpd
  roundcube/passwords-do-not-match:
  roundcube/database-type: pgsql