From fc8d4318eebd76d3bc66a3cc2e6fdae5f598c4af Mon Sep 17 00:00:00 2001
From: KiekerJan <kiekerjan@users.noreply.github.com>
Date: Tue, 1 Sep 2026 16:02:33 +0200
Subject: [PATCH] [security] Update roundcube to 1.6.17 (#2586)

---
 setup/webmail.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/setup/webmail.sh b/setup/webmail.sh
index b2713918..37a562ad 100644
--- a/setup/webmail.sh
+++ b/setup/webmail.sh
@@ -36,8 +36,8 @@ apt_install \
 #   https://github.com/mstilkerich/rcmcarddav/releases
 # The easiest way to get the package hashes is to run this script and get the hash from
 # the error message.
-VERSION=1.6.15
-HASH=1228dce33d7dd4085529d0ccc920deb603cd4e04
+VERSION=1.6.17
+HASH=c99c8c79852977f17a73111837aaaba000c5d634
 PERSISTENT_LOGIN_VERSION=bde7b6840c7d91de627ea14e81cf4133cbb3c07a # version 5.3
 HTML5_NOTIFIER_VERSION=68d9ca194212e15b3c7225eb6085dbcf02fd13d7 # version 0.6.4+
 CARDDAV_VERSION=4.4.3