The "current" version listed in Virtualmin for the Roundcube mail reader is not really current (0.1). There is an update (0.2-stable-dep) which addresses a security hole in 0.1 which enabled an attack by a flooding hacker.
I have upgraded to the ‘unsupported version’ for roundcube listed above. Previously, I had two attacks which caused my ISP to shutdown my bandwidth until addressed. Since upgrade last week, I’ve had no further problems.
If you use roundcube, I would strongly suggest the upgrade. Especially if you use roundcube from within an application. Hopefully the version will be updated in a newer version of Virtualmin.
Does it show up if you try to do a package update from the command line – for example, "yum update" on RHEL/CentOS, or "apt-get update && apt-get upgrade" on Debian/Ubuntu?
-Eric
And specifically:
[root@linux1 named]# yum update virtualmin
Setting up Update Process
No Packages marked for Update
[root@linux1 named]# yum update webmin
Setting up Update Process
No Packages marked for Update
[root@linux1 named]#
Yeah, your test system not having a virtualmin.repo file explains why running yum update on it doesn’t show any available updates – if you run “yum update” on your production system, does it show any Virtualmin updates?
As far as the test system goes, you may want to rename virtualmin.repo.rpmsave to virtualmin.repo.
-Eric
Here’s info from the production server. It doesn’t see anything new either.
[root@ezms1 postfix]# yum update virtual-server
Loaded plugins: downloadonly, rhnplugin, security
Excluding Packages in global exclude list
Finished
Reducing Virtualmin Distribution Neutral to included packages only
Finished
Skipping security plugin, no data
Setting up Update Process
No Packages marked for Update
Sigh… Feel like such a bother… Seems like VM should know when it’s current or not. It used to notify me until the exclude was put into Rackspace’s local repository to exclude webmin since their version is crippled for VM. Here’s the result:
[root@ezms1 postfix]# yum install wbm-virtual-server
Loaded plugins: downloadonly, rhnplugin, security
Excluding Packages in global exclude list
Finished
Reducing Virtualmin Distribution Neutral to included packages only
Finished
Setting up Install Process
Parsing package install arguments
Package 2:wbm-virtual-server-3.64-2.noarch installed and not available
Nothing to do
Okay, can you email me a copy of your production virtualmin.repo file?
I want to verify that the license and serial # are working properly – if something went awry when them, that might be able to cause the issues you’re seeing.
You can email it to eric@virtualmin.com – if you can, include a link to this forum thread in the message body.
The trouble with the test server dependencies was resolved by uninstalling Usermin and the related themes, clearing all the yum cache (yum clean all), and reinstalling the latest Usermin and theme packages.
-Eric