Roundcube 1.6.15 malware

koboh

cPFence Scanner details: Malware Found:

Additional Scanning:
/var/www/[roundcube_website_id]/roundcubemail-1.6.14.tar.gz: {HEX}php.polyshell.jfif.phpcomment.695.UNOFFICIAL FOUND
/var/www/[roundcube_website_id]/roundcubemail-1.6.14.tar.gz: moved to '/opt/cpfence/quarantined/roundcubemail-1.6.14.tar.gz.[1234567890123456789]'

Is this a false alarm or something?

cPFence

koboh

Thank you for reporting this false positive. We fixed it. You can now run this command to update the latest signatures, or just wait and it will be applied to all servers in the next few hours automatically.

cpfence --update