From 8c032705ae78daa237cd77affcc5087ca68e3a15 Mon Sep 17 00:00:00 2001
From: Joshua Tauberer <jt@occams.info>
Date: Thu, 22 Oct 2026 12:37:06 -0400
Subject: [PATCH] v78

---
 CHANGELOG.md       | 11 +++++++++++
 setup/bootstrap.sh |  2 +-
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1822271c..03f61705 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,17 @@
 CHANGELOG
 =========
 
+Version 78 (October 22, 2026)
+-----------------------------
+
+This is a security update. Although the main security issue this week
+is in upstream PHP and is fixed simply by `apt-get update && apt-get upgrade`,
+updating to the latest Mail-in-a-Box will do that for you. Roundcube
+separately released security fixes in the updated version in this release.
+
+* zpush updated to version 2.7.7.
+* Roundcube updated to 1.6.20.
+
 Version 77 (September 26, 2026)
 -------------------------------
 
diff --git a/setup/bootstrap.sh b/setup/bootstrap.sh
index a92fa941..6e20e3d4 100644
--- a/setup/bootstrap.sh
+++ b/setup/bootstrap.sh
@@ -23,7 +23,7 @@ if [ -z "$TAG" ]; then
 	if [ "$UBUNTU_VERSION" == "Ubuntu 22.04 LTS" ]; then
 		# This machine is running Ubuntu 22.04, which is supported by
 		# Mail-in-a-Box versions 60 and later.
-		TAG=v77
+		TAG=v78
 	elif [ "$UBUNTU_VERSION" == "Ubuntu 18.04 LTS" ]; then
 		# This machine is running Ubuntu 18.04, which is supported by
 		# Mail-in-a-Box versions 0.40 through 5x.