James,
That was posted today only a few hours ago on the cpanel security blog, and no, we won't be rushing to upgrade all cpanels accross our server fleet to EDGE release for the Horde fix. Steve will make a call on this shortly and make the appropriate announcement, but for now Horde will remain deactivated until we are 100% certian that the fix provided by cpanel works.
You are quite welcome to reactivate Horde in your VPS by upgrading Cpanel to their suggested EDGE release. I wouldn't rush this though, given this was a root breach but it's your call but we will accept no responsibility if your VPS is root breached.
Due to the severity of the breach (root breach) we acted quickly and let as many other hosts know too, yet at the same time being careful not to make public specific details about the actual exploit.
|