How to Safely Upgrade Roundcube to 1.6.11 on HestiaCP (Security Fix)

[sahsanu]

Hi @ahmedhaseeb

Check this post:

Roundcube security update just released

Hi @jperkins Thanks for sharing this update. As it fixes a security bug: Fix Post-Auth RCE via PHP Object Deserialization reported by firs0v. That basically means the vulnerability is an RCE (Remote Code Execution) and requires valid credentials to be exploited (i.e., it’s post-auth). Even though a user must be logged in to take advantage of this vulnerability, I strongly recommend updating Roundcube immediately. I’ve created this PR to bump Roundcube to version 1.6.11. I already wrote a m…