Server Software Notification List Message - updates for 5/12/2009
Date: May 8th 2009
(Mailing list information, including unsubscription instructions,
is located at the end of this message.)
__
Important updates in this Notification:
* Apache 2.x (PCI Compliance) for Linux
* PHP 5.x (PCI Compliance) for Linux
* OpenSSL (PCI Compliance) for Linux
* OpenSSH (PCI Compliance) for Linux
* mtop for Linux
* Accrisoft Freedom for Linux
* Access database for Linux
* vroot for Linux
* Enhanced Webmail for Linux
* WordPress for Linux
* Dovecot for Linux
* Accrisoft Freedom for Linux
* ClamAV for Linux and v3
* SpamAssassin for v3
* Sqlite for v3
The following dist will be completed 5/12/2009 in U.S datacenters and 5/13/09 in Asian and European datacenters:
------------------------------
Linux MPS/VPS:
------------------------------
* Apache 2.x (PCI compliance)
The Apache Web server default configuration file (/www/httpd.conf) for version 2.x will be updated to disable the trace command and improve the SSL settings through changing and/or adding the following lines:
SSLOptions +StrictRequire
SSLProtocol All -SSLv2
SSLCipherSuite ALL:!ADH:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
TraceEnable Off
(the SSLCipherSuite directive and following string should be on one line with a space between the directive and string)
This configuration is a requirement for PCI compliance. This update affects new accounts only. To update existing accounts, edit the httpd.conf file and add the above line. After saving the changes, restart the Web server by connecting to your account through SSH and executing the following command from the command line as the root user:
# restart_apache
* PHP 5.x (PCI Compliance)
The vinstall for the PHP: Hypertext Preprocessor scripting language for version 5.x will be updated to install version 5.2.9. This version brings the software to the most current 5.x version and addresses several issues, including security issues. This version is also a requirement for PCI compliance. More information about version 5.2.9 can be found here:
http://us2.php.net/releases/5_2_9.php
http://www.php.net/ChangeLog-5.php#5.2.9
To install PHP or upgrade existing installations to the new 5.x version, connect to your server through SSH and execute the following command from the prompt:
# vinstall php5
* OpenSSL (PCI compliance)
The OpenSSL toolkit for SSL/TLS will be updated to version 0.9.7a-43.17.2. This version brings the toolkit to the most current RHEL 4.x version and addresses security issues, such as CVE-2008-5077, discussed here:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077
More information about OpenSSL can be found here:
http://www.openssl.org/
No action needed.
* OpenSSH (PCI compliance)
The portable OpenSSH connectivity tool will be updated to version 5.2p1. This version addresses security concerns. More information about version 5.2p1 can be found here:
http://www.openssh.com/txt/release-5.2
The SSH daemon will be restarted as part of this update. No action needed.
* ClamAV
The vinstall for ClamAV, a GPL virus scanner, will be updated to install version 0.94.2. This version brings updates the scanner and addresses issues with log files. More information about version 0.94.2 can be found here:
http://sourceforge.net/project/shownotes.php?release_id=643134&group_id=86638
The vinstall will also be updated to improve installation text. The ClamAV daemon will be restarted as part of this update. No action needed for existing installations.
* Open WebMail
The vinstall for the Open WebMail email Web interface will be updated to address issues with paths. This update affects the vinstall only. No action needed.
* vroot
The vroot administration utility will be updated to enable repeatable menu selections without exiting the utility. The utility will also be updated to disconnect after 5 minutes of inactivity while in the vroot menu. This update affects the vroot utility only. No action needed.
* vrmuser
The proprietary vrmuser command to remove users will be updated to give warning when removing users configured as the domain administrator for subhosts. This update affects the vrmuser command only. No action needed.
* Urchin 5
The vinstall for Urchin Web Analytics version 5 will be updated to include subhost admin user creation. This update affects the vinstall only. No action needed.
* Enhanced Webmail (beta)
Note: This is a beta release and at this time the software should not be used for mission-critical projects.
The vinstall for Enhanced Webmail will be updated to address the following issues:
- code tags displaying in emails
- autoreply problems when configuring autoreplies in CPX and Enhanced Webmail
- problems adding addresses to contacts
- email sent to local users being tagged as spam
- broken installations when exiting the installation menus
- problems with login history display
- email addresses not blocked correctly
- incorrect date display in search results
- syntax improvements
- cancel action buttons
- task action links
- task categorizations
To update existing installations of Enhanced Webmail, connect to your server through SSH and execute the following from the command prompt:
# vuninstall enhancedwebmail
# vinstall enhancedwebmail
* WordPress
The vinstall for the WordPress blogging utility will be updated to install version 2.7. This version is a significant update, introducing new interfaces and resolving several issues. More information about version 2.7 can be found here:
http://wordpress.org/development/2008/12/coltrane/
To update existing installations, make a backup of all files and databases, then connect to your account through SSH and execute the following from the command prompt:
# vinstall wordpress --update
To obtain a full list of command-line options, connect to your account through SSH and execute the following from the command prompt:
# vinstall wordpress --help
This update affects the vinstall only. If you do not wish to change or configure your WordPress installation, no action needed.
* bc/dc
The bc and dc system calculator will be added to the system. No action needed.
* Dovecot
The Dovecot email server will be updated to version 1.1.11. This version updates the server and addresses issues with the mbox file format, POP, and IMAP. More information about version 1.1.11 can be found here:
http://www.dovecot.org/list/dovecot-news/2009-February/000099.html
The email server will be restarted as part of this update.
The vinstall will also be updated to prevent duplicate email message downloads after initial conversion to the Maildir email box format. This update affects the vinstall only. No action needed.
* Access
The default configuration file for the server access database will be updated to include exceptions for the localhost in the GreetPause setting intended to help with mail filtering. This update affects new accounts only. To update existing accounts to make exceptions for localhost, edit the /etc/mail/access file and add the following line:
GreetPause:localhost 0
To make changes to the access file effective, execute the following command at a prompt after editing the file:
# vnewaccess
* mtop
A vinstall for the mtop MySQL monitoring tool will be added to the system. This tool functions much like the popular top command, showing MySQL queries and processes in real-time. More information about mtop can be found here:
http://mtop.sourceforge.net/
To install mtop, connect to your account through SSH and execute the following command from a prompt:
# vinstall mtop
* Accrisoft
The Accrisoft Freedom installation process will be updated to install version 6.0.007. The update affects new installations only. The software requires PHP 5.x and MySQL 5.x, so any accounts with PHP 4.x or MySQL 4.x that select Accrisoft Freedom as an add-on will need to upgrade PHP and MySQL to version 5.x for both before ordering Freedom.
* Sendmail RBL
The vinstall for the Sendmail RBL (real-time blackhole list) subscription utility will be updated to remove the following dsbl lists which are no longer maintained:
- list.dsbl.org
- multihop.dsbl.org
- unconfirmed.dsbl.org
To update existing subscriptions, connect to your server through SSH and execute the following from the command prompt:
# vinstall sendmail-rbls
------------------------------
FreeBSD MPS/VPS v3:
------------------------------
* ClamAV
The vinstall for ClamAV, a GPL virus scanner, will be updated to install version 0.95.1. This version brings updates the scanner. More information about version 0.95.1 can be found here:
http://sourceforge.net/project/shownotes.php?release_id=674431&group_id=86638
The ClamAV daemon or milter will be restarted as part of this update. No action needed for existing installations.
* SpamAssassin
The vinstall for the SpamAssassin mail filter will be updated to install version 3.2.5_2. More information about version 3.2.5_2 can be found here:
http:
This version brings the filter to the most current FreeBSD version. The SpamAssassin service will be restarted as part of this update. No action needed for existing installations.
* Sendmail RBL
The vinstall for the Sendmail RBL (real-time blackhole list) subscription utility will be updated to remove the following dsbl lists which are no longer maintained:
- list.dsbl.org
- multihop.dsbl.org
- unconfirmed.dsbl.org
To update existing subscriptions, connect to your server through SSH and execute the following from the command prompt:
# vinstall sendmail-rbls
* lftp
The lftp file transfer program will be updated to version 3.7.11. This version brings the utility to the most current FreeBSD version. More information about version 3.7.11 can be found here:
http:
No action needed.
* GNU Ghostscript 8.x
The GNU Ghostscript interpreter version 8.x will be updated to version 8.64. This version updates the utility. More information about version 8.64 can be found here:
http:
http:
No action needed.
* xinit
The xinit initializer for the X Windows System will be updated to version 1.1.1_1. This version brings the utility to the most current FreeBSD version. More information about version 1.1.1_1 can be found here:
http:
No action needed.
* SQLite
The SQLite database engine will be updated to version 3.6.11. This version brings the engine to the most current FreeBSD version. More information about version 3.6.11 can be found here:
http:
No action needed.
* ImageMagick
The ImageMagick image processing tools library will be updated to version 6.5.0.7. This version updates the library. More information about version 6.5.0.7 can be found here:
http:
No action needed.
------------------------------
FreeBSD MPS/VPS v2:
------------------------------
* Sendmail RBL
The vinstall for the Sendmail RBL (real-time blackhole list) subscription utility will be updated to remove the following dsbl lists which are no longer maintained:
- list.dsbl.org
- multihop.dsbl.org
- unconfirmed.dsbl.org
To update existing subscriptions, connect to your server through SSH and execute the following from the command prompt:
# vinstall sendmail-rbls
------------------------------
Signature:
------------------------------
The following updates will be sent out to all Signature servers beginning on 5-13-2009.
* Webmail UI Distorted
Updated code so that the Webmail interface does not get distorted when customers create users with long email names.
* Schedule Tasks UI Elements
Updated code so the Delete, Disable, and Enable screen elements function properly.
* Help File Update
Updated Task Scheduler to make the feature easier to use.
* RFC Compliant Email Messages
Updated code so that email messages can be mailed with single letters after specialty characters, per RFC compliant rules.
* PHP Version Selection Removed from Control Panel
Code updated so that customers without PHP will not see the PHP versioning page.
* Dovecot Session Control and Build Changes
Updated code to so that dovecot will not leave inactive sessions open too long.
* Maildir Conversion
The conversion of customer mail storage to the Maildir system will begin on May 14 in Verio retail. In the weeks after the Verio Retail conversions, we will be updating OEM customers to the new mail storage system. These conversions will occur during the normal maintenance window and will result in faster mail searches and retrievals. During the conversion, customers will not be able to provision new accounts or check their mail. Separate notices will be going out soon with details of the upgrade.
COMPANY CONFIDENTIAL
The information included in this document is intended for internal use by Verio, OEM partners, and viaVerio resellers. Printed copies of this document are not controlled. Official form is available from Verio.
Note: This notification could include technical inaccuracies or typographical errors. Changes can be made to the information herein; these changes will be distributed in new notifications. VERIO might make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time.
Verio and the Verio logo are trademarks and/or service marks of Verio Inc. in the United States and other countries. All other names are trademarks or registered marks of their respective owners.
©2009 Verio Inc. All rights reserved.
--
The following information is a reminder of your current mailing
list subscription:
You are subscribed to the following list:
Server Software Notification List
using the following email:
example@example.com
You may automatically unsubscribe from this list at any time by
visiting the following URL:
<http://list.viaverio.com/cgi-dada/mail.cgi/u/ssul/>;
If the above URL is inoperable, make sure that you have copied the
entire address. Some mail readers will wrap a long URL and thus break
this automatic unsubscribe mechanism.
You may also change your subscription by visiting this list's main screen:
<http://list.viaverio.com/cgi-dada/mail.cgi/list/ssul>;
If you're still having trouble, please contact the list owner at:
<mailto:reseller@viaverio.com>;
The following physical address is associated with this mailing list:
Verio Inc
1203 N Research Way
Orem, UT 84097
Mailing List Powered by Dada Mail
http://list.viaverio.com/cgi-dada/mail.cgi/what_is_dada_mail/
|
<< Previous: Server Software Notification List Message - updates for 3/31/09 |
| Archive Index | |
Next: Server Software Notification List Message - CORRECTION for 5/26/2009 >> |
This list is for periodic notification emails regarding software updates on the server.
Subscribe to Server Software Notification List:
Go back to viaVerio Reseller Portal
Powered by Dada Mail 2.10.16
Copyright © 1999-2007, Simoni Creative.
)