We just release 1.8.12 with the following changes:
Security
- Restrict hestiamail file permissions (todo should probably have a link here)
- Fix roundcube permissions ( GH-4387 )
Please update your server 
16 Likes
Also Roundcube / Filegator / Snappymail version update
7 Likes