Server Software Update Notification: 03-28-2009

• Dovecot for v3
• SpamAssassin for v3
• OpenSSL (PCI Compliance) for v3, v2, and v1
• Python for v3
• Lynx for v3
• Wget for v3
• Ruby for v3
• GnuTLS for v3
• Enhanced Webmail (beta) for v3 and v2
• ClamAV for v3 and v2 **internal**

FreeBSD MPS/VPS v3

Dovecot

The Dovecot email server will be updated to version 1.1.11. This version updates the server and addresses issues with the mbox file format, POP, and IMAP. More information about version 1.1.11 can be found here:

http://www.dovecot.org/list/dovecot-news/2009-February/000099.html

The email server will be restarted as part of this update. No action needed.

SpamAssassin

The vinstall for the SpamAssassin mail filter will be updated to install version 3.2.5_1. This version updates the filter and addresses issues with Perl. More information about version 3.2.5_1 can be found here:

http://www.freshports.org/commit.php?category=mail&port=p5-Mail-SpamAssassin&...


The SpamAssassin service will be restarted as part of this update. No action needed.

OpenSSL (PCI compliance)

The OpenSSL toolkit for SSL/TLS version 0.9.7m will be updated to address a security vulnerability (CVE-2008-5077), discussed here:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5077

No action needed.

Python

The Python programming language version 2.5 will be updated to install version 2.5.4_1. This version brings the language to the most current FreeBSD version. More information about version 2.5.4_1 can be found here:

http://www.freshports.org/commit.php?category=lang&port=python25& ...

http://www.freshports.org/commit.php?category=lang&port=python25& ...


To update existing installations, connect to your server through SSH and execute the following command:

# vinstall python-2.5

IP::Country

The IP::Country Perl module will be updated to version 2.26. This version brings the module to the most current version. More information about version 2.26 can be found here:

http://cpansearch.perl.org/src/NWETTERS/IP-Country-2.26/CHANGES

No action needed.

Linux compatibility environment

The Linux compatibility environment will be updated to version 4_14. This version brings the environment to the most current FreeBSD version. More information about version 4_14 can be found here:

http://www.freshports.org/commit.php?category=emulators&port=linux_base-fc4& ...


No action needed.

E2fsprogs

The UUID library for the e2fsprogs utility package will be updated to version 1.41.4_1. This version brings the package to the most current FreeBSD version. More information about the library can be found here:

http://www.freshports.org/misc/e2fsprogs-libuuid/

No action needed.

Lynx

The Lynx command-line textual Web browser will be update to version 2.8.7d13. This version brings the utility to the most current FreeBSD version. More information about version 2.8.7d13 can be found here:

http://www.freshports.org/commit.php?category=www&port=lynx-current& ...
http://www.freshports.org/commit.php?category=www&port=lynx-current& ...
http://www.freshports.org/commit.php?category=www&port=lynx-current& ...
http://www.freshports.org/commit.php?category=www&port=lynx-current& ...


No action needed.

Wget

The Wget file retrieval utility will be updated to version 1.11.4. This version brings the utility to the most current FreeBSD version. More information about version 1.11.4 an be found here:

http://www.freshports.org/commit.php?category=ftp&port=wget& ...


No action needed.

HTML-Parser

The HTML-Parser module collection will be updated to version 3.60. This version brings the utility to the most current version and addresses issues with compatibility. More information about version 3.60 can be found here:

http://cpansearch.perl.org/src/GAAS/HTML-Parser-3.60/Changes

No action needed.

LibXML2

The LibXML2 C parser library for XML will be updated to version 2.7.3. This version brings the library to the most current FreeBSD version. More information about verswion 2.7.3 can be found here:

http://www.freshports.org/commit.php?category=textproc&port=libxml2& ...

No action needed.

Libgcrypt

The Libgcrypt cryptographic library will be updated to version 1.4.4. This version updates the utility. More information about version 1.4.4 can be found here:

http://www.freshports.org/commit.php?category=security&port=libgcrypt& ...


No action needed.

Net::DNS

The Net::DNS Perl module collection will be updated to version 0.65. This version brings the module to the most current version. More information about version 0.65 can be found here:

http://cpansearch.perl.org/src/OLAF/Net-DNS-0.65/Changes

No action needed.

GPG

GPG (GNU Privacy Guard or GnuPG) will be updated to version 2.0.10_2. This version updates the utility and addresses issues with cURL. More information about version 2.0.10_2 can be found here:

http://www.freshports.org/commit.php?category=security&port=gnupg& ...


No action needed.

xfs

The xfs X.org font server will be updated to version 1.0.8_1,1. This version brings the server to the most current FreeBSD version. More information about version 1.0.8_1,1 ca be found here:

http://www.freshports.org/commit.php?category=x11-fonts&port=xfs& ...


No action needed.

luit

The luit filter will be updated to version 1.0.3_1. This version brings the filter to the most current FreeBSD version. More information about version 1.0.3_1 can be found here:

http://www.freshports.org/commit.php?category=x11&port=luit& ...


No action needed.

X.Org Fonts

The following fonts packages will be updated to the most current FreeBSD versions:

- Schumacher - 1.0.0_1
- Miscbitmaps - 7.4

More information about these versions ca be found here:

http://www.freshports.org/commit.php?category=x11-fonts&port=font-schumacher-misc& ...
http://www.freshports.org/commit.php?category=x11-fonts&port=xorg-fonts-miscbitmaps& ...

No action needed.

SQLite

The SQLite database engine will be updated to version 3.6.10. This version brings the engine to the most current FreeBSD version. More information about version 3.6.10 can be found here:

http://www.freshports.org/commit.php?category=databases&port=sqlite3& ...

No action needed.

X.Org Extensions

The X.Org Extension library will be updated to version 1.0.5,1. This version brings the library to the most current FreeBSD version. More information about version 1.0.5,1 ca be found here:

http://www.freshports.org/commit.php?category=x11&port=libXext& ...


No action needed.

Xterm

The xterm terminal emulator will be updated to version 241. This version updates the emulator. More information about version 241 can be found here:

http://invisible-island.net/xterm/xterm.log.html#xterm_241

No action needed.

OpenGL

The libGL OpenGL library will be updated to version 7.3_1. This version brings the library to the most current FreeBSD version. More information about version 7.3_1 can be found here:

http://www.freshports.org/commit.php?category=graphics&port=libGL& ...


No action needed.

DRI2

The X.Org DRI2 prototype headers package will be updated to version 1.99.3. This version brings the library to the most current FreeBSD version. More information about version 1.99.3 can be found here:

http://www.freshports.org/commit.php?category=x11&port=dri2proto& ...

No action needed.

Pixman

The pixman graphics manipulation program will be updated to version 0.14.0. This version brings the program to the most current FreeBSD version. More information about version 0.14.0 can be found here:

http://www.freshports.org/commit.php?category=x11&port=pixman& ...

No action needed.

ImageMagick

The ImageMagick image processing tools library will be updated to version 6.4.9.3. This version updates the library. More information about version 6.4.9.3 can be found here:

http://www.freshports.org/commit.php?category=graphics&port=ImageMagick& ...

No action needed.

lftp

The lftp file transfer program will be updated to version 3.7.8. This version updates the utility. More information about version 3.7.8 can be found here:

http://www.freshports.org/commit.php?category=ftp&port=lftp& ...

No action needed.

t1lib

The t1lib library for Adobe Type 1 fonts will be updated to version 5.1.2_1,1. This version brings the utility to the most current FreeBSD version. More information about version 5.1.2_1,1 can be found here:

http://www.freshports.org/commit.php?category=devel&port=t1lib& ...

No action needed.

Ruby

The Ruby object-oriented scripting language with support for the Oniguruma regular expression library will be updated to version 1.8.7.72_1,1. This version brings the language to the most current FreeBSD version. More information about Ruby can be found here:

http://www.freshports.org/lang/ruby18/

No action needed.

Test::Harness

The Test::Harness Perl module will be updated to version 3.16. This brings the module to the most current version. More information about version 3.16 can be found here:

http://cpansearch.perl.org/src/ANDYA/Test-Harness-3.16/Changes


No action needed.

X.Org C Language Binding

The X.Org protocol C language Binding will be updated to version 1.4. This version brings the binding to the most current version. More information about version 1.4 can be found here:

http://www.freshports.org/commit.php?category=x11&port=xcb-proto& ...
http://www.freshports.org/commit.php?category=x11&port=xcb-proto& ...


No action needed.

S-Lang

The S-Lang programming library will be updated to version 2.1.4_1. This version brings the library to the most current FreeBSD version. More information about version 2.1.4_1 can be found here:

http://www.freshports.org/commit.php?category=devel&port=libslang2& ...


No action needed.

Libwww

The libwww Perl module will be updated to version 5.825. This version brings the module to the most current version. More information about version 5.825 can be found here:

http://cpansearch.perl.org/src/GAAS/libwww-perl-5.825/Changes


No action needed.

X11

The libX11 library for the X11 X Windows System will be updated to version 1.2,1. This version brings the library to the most current FreeBSD version. More information about version 1.2,1 can be found here:

http://www.freshports.org/commit.php?category=x11&port=libX11& ...
http://www.freshports.org/commit.php?category=x11&port=libX11& ...
http://www.freshports.org/commit.php?category=x11&port=libX11& ...
http://www.freshports.org/commit.php?category=x11&port=libX11& ...
http://www.freshports.org/commit.php?category=x11&port=libX11& ...

No action needed.

GnuTLS

The GnuTLS (GNU Transport Layer Security) library will be updated to version 2.6.4. This version brings the utility to the most current FreeBSD version. More information about version 2.6.4 can be found here:

http://www.freshports.org/commit.php?category=security&port=gnutls& ...
http://www.freshports.org/commit.php?category=security&port=gnutls& ...


No action needed.

Enhanced Webmail (beta)

Note: This is a beta release and at this time the software should not be used for mission-critical projects.

The vinstall for Enhanced Webmail will be updated to address security vulnerabilities and to address issues with broken installations when exiting the installation menus. It is strongly recommended to update any existing installations.

To update existing installations of Enhanced Webmail, connect to your server through SSH and execute the following from the command prompt:

# vuninstall enhancedwebmail
# vinstall enhancedwebmail

Portupgrade

The Index-6.db file used by Portupgrade will be updated to reflect current packages and dependencies. Some package and port timestamps will also be updated. No action needed.

m4

The GNU m4 macro processor will be updated to version 1.4.12,1. This version brings the processor to the most current FreeBSD version. More information about version 1.4.12,1 can be found here:

http://www.freshports.org/commit.php?category=devel&port=m4& ...


No action needed.

libdrm

The libdrm interface to kern Direct Rendering Module (DRM) services will be updated to version 2.4.5. This version brings the utility to the most current FreeBSD version. More information about version 2.4.5 can be found here:

http://www.freshports.org/commit.php?category=graphics&port=libdrm& ...

No action needed.

Vim-lite

The vim-lite editor will be updated to version 7.2.106_1. This version updates the editor. More information about the full vim editor can be found here:

http://www.freshports.org/editors/vim/

No action needed.

X11 Session Management

The X11 Session Management library will be updated to version 1.1.0_1,1. This version brings the library to the most current FreeBSD version. More information about version 1.1.0_1,1 can be found here:

http://www.freshports.org/commit.php?category=x11&port=libSM& ...


No action needed.

Net::SSLeay

The NET::SSLeay Perl module will be updated to version 1.35_1. This version brings the module to the most current FreeBSD version. More information about version 1.35_1 can be found here:

http://www.freshports.org/commit.php?category=security&port=p5-Net-SSLeay& ...

No action needed.

IO::Socket::SSL

The IO::Socket::SSL class for SSL sockets will be updated to version 1.23. This version brings the class to the most current version. More information about version 1.23 can be found here:

http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.23/Changes

No action needed.

X Input Extension

The X Input extension library will be update to version 1.2.1,1. This version brings the library to the most current FreeBSD version. More information about version 1.2.1,1 can be found here:

http://www.freshports.org/commit.php?category=x11&port=libXi& ...

No action needed.

PNG

The libpng reference library will be updated to version 1.2.35. This version brings the library to the most current FreeBSD version. More information about version 1.2.35 can be found here:

http://www.freshports.org/commit.php?category=graphics&port=png& ...


No action needed.

Netpbm

The Netpbm graphics software package will be updated to version 10.26.60. This version brings the package to the most current FreeBSD version. More information about version 10.26.60 can be found here:

http://www.freshports.org/commit.php?category=graphics&port=netpbm& ...

No action needed.

FreeBSD MPS/VPS v2

OpenSSL

The OpenSSL toolkit for SSL/TLS version 0.9.7m will be updated to address a security vulnerability (CVE-2008-5077), discussed here:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5077

No action needed.

Enhanced Webmail (beta)

Note: This is a beta release and at this time the software should not be used for mission-critical projects.

The vinstall for Enhanced Webmail will be updated to address security vulnerabilities and to address issues with broken installations when exiting the installation menus. It is strongly recommended to update any existing installations.

To update existing installations of Enhanced Webmail, connect to your server through SSH and execute the following from the command prompt:

# vuninstall enhancedwebmail
# vinstall enhancedwebmail

FreeBSD MPS/VPS v1:

OpenSSL

The OpenSSL toolkit for SSL/TLS will be updated to version 0.9.6i to address a security vulnerability (CVE-2008-5077), discussed here:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5077

No action needed.

Signature

IMAP Searches in Foreign Character Sets

Code updated so customers’ mail clients using IMAP will be able to perform mail message searches using foreign characters. Previously, dovecot settings did not allow these searches. (This article was published earlier in the week; it is not an update to the earlier notice.)

SOAP Added to PHP

Code updated so that customers can use SOAP with php, a feature previously not available on the Signature platform.

Help File Update

Updated Task Scheduler help so that it properly represents the functionality of the tool. Previously, certain nuances of the Task Scheduler were not explained.

Control Panel Redirect

Updated code so that a person trying to access the Control Panel of a newly purchased domain will not see a blank screen. Previously, the system would redirect the I.P./stats page to the domain name/ControlPanel page when someone wanted to access the Control Panel via I.P. If the domain name had not been propagated, this redirect returns a blank page. Now, when a customer types the I.P./stats address in the browser, they can access the Control Panel.

Proper Error Message Displayed for Invalid Mail Forward Addresses

Code updated so that the same pop up error message appears when a customer presses Enter or clicks Save when trying to submit an invalid email address in the Create Mail Forward window.

Note: This notification could include technical inaccuracies or typographical errors. Changes can be made to the information herein; these changes will be distributed in new notifications. AlpineWeb might make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time.