Server Software Update Notification: 03-19-2009

• Migration for v3 and v2
• Enhanced Webmail (beta) for v3 and v2
• PostgreSQL for v3
• Python for v3

FreeBSD MPS/VPS v3:

Migration - v2 to v3

The vmigrate utility used during v2 to v3 migration will be updated to address issues with user groups, home directories, Apache Web server permissions, log files, Procmail, and PHP short open tags. If you are having problems using the vmigrate utility, connect to your account through SSH and execute the vmigrate command without any options to enter the utility interactive menu.

Important: Executing vmigrate may erase any customizations you have made to your account outside of the vmigrate utility.

Enhanced Webmail (beta)

Note: This is a beta release and at this time the software should not be used for mission-critical projects.

The vinstall for Enhanced Webmail will be updated to address the following issues:

• email sent to local users being tagged as spam
• autoreply problems when configuring autoreplies in CPX and Enhanced Webmail
• broken installations when exiting the installation menus

To update existing installations of Enhanced Webmail, connect to your server through SSH and execute the following from the command prompt:

# vuninstall enhancedwebmail
# vinstall enhancedwebmail

Portupgrade

The Index-6.db file used by Portupgrade will be updated to reflect current packages and dependencies. Some package and port timestamps will also be updated. No action needed.

CDialog

The CDialog script-interpreter will be updated to version 1.1.20080819,1. This version brings the utility to the most current FreeBSD version. More information about version 1.1.20080819,1 can be found here:

http://www.freshports.org/commit.php?category=devel&port=cdialog& ...

No action needed.

PHP 5.x

The GD extension for the PHP: Hypertext Preprocessor scripting language for version 5.x will be updated to address issues with X.org compatibility. No action needed.

Sudo

The sudo (superuser do) utility will be updated to version 1.6.9.20. This version brings the utility to the most current FreeBSD version. More information about version 1.6.9.20 can be found here:

http://www.freshports.org/commit.php?category=security&port=sudo& ...

No action needed.

X.Org XExt

The X.Org XExt extension headers will be updated to version 7.0.5. This version brings the headers to the most current FreeBSD version. More information about version 7.0.5 can be found here:

http://www.freshports.org/commit.php?category=x11&port=xextproto& ...

No action needed.

Test::Harness

The Test::Harness Perl module will be updated to version 3.14_2. This version updates the module. More information about version 3.14_2 can be found here:

http://www.freshports.org/commit.php?category=devel&port=p5-Test-Harness& ...

No action needed.

NetAddr::IP

The NetAddr::IP Perl module will be updated to version 4.024. This version brings the module to the most current version. More information about version 4.024 can be found here:

http://cpansearch.perl.org/src/MIKER/NetAddr-IP-4.024/Changes

No action needed.

PostgreSQL

8.x The vinstall for the PostgreSQL database management system version 8.x will be updated to install version 8.2.12. This version brings the system to the most current 8.x version. More information about version 8.2.4 can be found here:

http://www.postgresql.org/docs/8.2/static/release-8-2-12.html

To install PostreSQL, connect to your server through SSH and run the following from the command prompt:

# vinstall postgresql8 Follow the onscreen instructions to complete the installation.

Note: To upgrade existing installations, make a backup of all databases, shutdown PostgreSQL, and uninstall the current version before running "vinstall postgresql" (above).

For considerations in upgrading between versions of PostgreSQL, including avoiding data loss, see:

http://www.postgresql.org/docs/8.2/static/install-upgrading.html

Python

The Python programming language version 2.5 will be updated to install version 2.5.2_3. This version addresses several security vulnerabilities, including those discussed in CVE-2008-2315, CVE-2008-2316, CVE-2008-3142, CVE-2008-3143, and CVE-2008-3144:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-2315
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-2316
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3142
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3143
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3144

More information about version 2.5.2_3 can be found here:

http://www.freshports.org/commit.php?category=lang&port=python25& ...

To update existing installations, connect to your server through SSH and execute the following command:

# vinstall python-2.5

FreeBSD MPS/VPS v2:

Migration - v2 to v3

The vmigrate utility used during v2 to v3 migration will be updated to address issues with user groups, home directories, Apache Web server permissions, log files, Procmail, and PHP short open tags. If you are having problems using the vmigrate utility, connect to your account through SSH and execute the vmigrate command without any options to enter the utility interactive menu.

Important: Executing vmigrate may erase any customizations you have made to your account outside of the vmigrate utility. Also note that the vmigrate command should be executed on the v3 account.

Enhanced Webmail (beta)

Note: This is a beta release and at this time the software should not be used for mission-critical projects.

The vinstall for Enhanced Webmail will be updated to address the following issues:

• e-mail sent to local users being tagged as spam
• autoreply problems when configuring autoreplies in CPX and Enhanced Webmail
• broken installations when exiting the installation menus

To update existing installations of Enhanced Webmail, connect to your server through SSH and execute the following from the command prompt:

# vuninstall enhancedwebmail
# vinstall enhancedwebmail

Signature:

phpMyFAQ

Configuration Issue Updated code so that changes to phpMyFAQ customer configurations are retained when the profile is saved. Previously, when customers made changes to user profiles in the phpMyFAQ Admin tool the changes were not retained after the user profile was saved.

Whitelist and Blacklist Entry Validation

Updated the Whitelist and Blacklist address fields so that they will not accept invalid entries like 2-byte characters. Previously, customers could submit 2-byte characters, I.P. addresses and partial addresses into the fields without seeing an error message. After accepting the entry, the Control Panel displayed the characters as garbled and they would not be used. Now, when customers attempt to submit an entry containing two-byte characters, the Control Panel returns an error message.

Help File Updates

Updated the following English help files:

• Managing Spam and Clam AV, to better describe how to set up spam filters in concordance with Whitelists, Blacklists, and Custom Filters.

Note: This notification could include technical inaccuracies or typographical errors. Changes can be made to the information herein; these changes will be distributed in new notifications. AlpineWeb might make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time.