cPanel, Inc. » News http://cpanel.net Tue, 14 May 2013 13:11:45 +0000 en-US hourly 1 http://wordpress.org/?v=3.5.1 Update for cPanel & WHM Versions 11.38, 11.36, 11.34, & 11.32 http://cpanel.net/ssh-key-security-fix-11-32-11-34-11-36-11-38/ http://cpanel.net/ssh-key-security-fix-11-32-11-34-11-36-11-38/#comments Tue, 14 May 2013 13:04:28 +0000 Sarah http://cpanel.net/?p=22801 cPanel, Inc. has published a security update for cPanel & WHM versions 11.38, 11.36, 11.34, and 11.32. This update resolves an issue with unchecked reseller privileges. We recommend all customers update to the latest build of each version as soon as possible.

The cPanel Security Team has assigned a rating of Moderate to the vulnerability. Information on security ratings is available at http://docs.cpanel.net/twiki/bin/view/AllDocumentation/SecurityLevels.

Using a handcrafted URL, a malicious reseller could cause WHM to overwrite files in root’s .ssh directory with a randomly generated private key. This could result in a denial of service attack if the key is being used.

If your deployed cPanel & WHM servers are configured to automatically update when new releases are available, then no action is required. Your systems will update automatically. If you have disabled automatic updates, then you are highly encouraged to update your cPanel & WHM installs at your earliest convenience.

Releases

The following versions of cPanel & WHM address all known vulnerabilities:

* 11.38.0.5
* 11.36.1.6
* 11.34.1.14
* 11.32.6.5

The latest public releases of cPanel & WHM for all update tiers are published at http://httpupdate.cpanel.net.

Acknowledgements

cPanel, Inc. would like to thank Patrick at Synhosting for reporting the vulnerability.

For the PGP Signed Message, please go here.

]]> http://cpanel.net/ssh-key-security-fix-11-32-11-34-11-36-11-38/feed/ 0 11.38 Now in CURRENT Tier http://cpanel.net/11-38-now-in-current-tier/ http://cpanel.net/11-38-now-in-current-tier/#comments Tue, 07 May 2013 20:19:17 +0000 Sarah http://cpanel.net/?p=22662 5/7/2013
Houston, TX-

cPanel, Inc. announces the release of cPanel & WHM software version 11.38.

cPanel & WHM software release 11.38, which releases to the CURRENT tier today, offers significant improvements to SSL Management and Backups. It also provides enhancements to jail shell, email auto configuration, and more.

Improved SSL Management

The improved SSL management system offers a number of enhancements; support for UCC certificates, SNI (Server Name Indication), and enhanced support for Wildcard SSL certificates. This allows cPanel users to host multiple SSL websites on the same account. cPanel & WHM users will notice changes to the user interfaces that simplify installing, managing the various SSL certificates, keys, and signing requests associated with their domains.

System and Account Backups

cPanel introduces a new backup system with software release 11.38. Among the changes are the ability to store backups in multiple locations, reduction in the time needed to perform a full backup, and a complete set of functionality for automating backups.

Backup restoration is also enhanced. A new queuing system allows system administrators to perform other operations within cPanel & WHM while restorations occur.

Other notable changes include:

* Ability to configure the host used by email autodiscovery, and auto configuration
* Improved email tracking ability by ensuring the From header matches the mail sender
* Use of a single template system for customizing the Apache configuration
* Changes to jail shell, mod_ruid2, and more

Detailed information on all 11.38 features can be found at http://docs.cpanel.net.  For an overview of the latest features available in 11.38, visit http://releases.cpanel.net.

]]> http://cpanel.net/11-38-now-in-current-tier/feed/ 0 11.34 EOL, 6 Month Notice http://cpanel.net/11-34-eol-6-month-notice/ http://cpanel.net/11-34-eol-6-month-notice/#comments Wed, 01 May 2013 19:15:05 +0000 Sarah http://cpanel.net/?p=22401 cPanel & WHM 11.34 reaches End Of Life October 15, 2013. That means there are only 6 months left in the life cycle.

In accordance with our End of Life Policy [http://docs.cpanel.net/twiki/bin/view/AllDocumentation/InstallationGuide/LongTermSupport], cPanel & WHM software release 11.34 will continue functioning on servers after reaching end of life. No further updates, including security fixes, or installations will be provided for 11.34 after the end of life date.

All customers currently using cPanel & WHM software release 11.34 are advised to begin planning the upgrade to cPanel & WHM software release 11.36 (EOL Date: March 2014). If you desire assistance with your migration plans, please contact our technical support team at https://tickets.cpanel.net/submit/. Our professional staff will help with recommendations, migration assistance and more.

A PGP Signed Version is also available

]]> http://cpanel.net/11-34-eol-6-month-notice/feed/ 0 11.36 Pushed to STABLE http://cpanel.net/11-36-pushed-to-stable/ http://cpanel.net/11-36-pushed-to-stable/#comments Mon, 08 Apr 2013 19:38:23 +0000 Sarah http://cpanel.net/?p=22231 April 8, 2013
Houston, TX-

cPanel Inc., announces the release of cPanel & WHM software version 11.36 to the STABLE tier.

Included in this brand new software release are further improvements to the update system, building on work started with cPanel & WHM 11.30. A new staging step during installation allows a variety of checks to occur prior to changing the cPanel & WHM installation. This makes both new installations, and upgrades, more reliable.

cPanel & WHM software version 11.36 also brings an entirely new system for managing applications, based upon the tried-and-true RPM packaging format. By distributing applications via RPM, we are able to reduce cPanel & WHM installation time by 30%, on average. The new system also provides integrators and system deployers a simplified means of distributing applications with cPanel & WHM software.

We are happy to announce that cPanel & WHM 11.36 brings a modern version of Perl with it. Perl 5.14 is available with all versions of 11.36 and newer. This change brings an end to the older Perl 5.8.8 distributed with prior versions of cPanel & WHM software.

Included in cPanel & WHM 11.36 is support for Apache 2.4, provided via EasyApache. Apache 2.4 brings many new features and performance benefits to your hosting platform.

Other features also available in version 11.36:

-The email auto discovery support for Thunderbird and Outlook has been updated and re-introducted with improved compatibility with existing setups.

-The ability to track mail sent by web applications is improved through new functions that integrate with Apache and PHP.

cPanel thanks the members of our EDGE-Users community for their feedback and testing of the development releases. If you would like to join this community please GO HERE: http://go.cpanel.net/cpmailinglist.

Please note, after upgrading to the new release, a downgrade to an older version will not be permitted.

About cPanel, Inc.


Since 1997, cPanel, Inc. has become the world’s leading provider of dependable hosting and server automation solutions. cPanel builds software that transforms standalone servers into fully automated point-and-click web hosting platforms. cPanel & WHM licensed software allows owners of servers and websites, along with resellers and developers, to optimize their technical resources and replace tedious tasks with dynamic, intuitive web-based interfaces. www.cpanel.net
.

]]> http://cpanel.net/11-36-pushed-to-stable/feed/ 0 cPanel & WHM Security Releases for 11.32, 11.34, and 11.36 http://cpanel.net/cpanel-whm-security-releases-for-11-32-11-34-and-11-36/ http://cpanel.net/cpanel-whm-security-releases-for-11-32-11-34-and-11-36/#comments Mon, 01 Apr 2013 20:56:37 +0000 Sarah http://cpanel.net/?p=22012 cPanel has published security updates for all supported versions of cPanel & WHM. These updates contain fixes for a problem with the Roundcube webmail application. We recommend all customers update to the latest build of each version as soon as possible.

The cPanel Security Team has assigned a rating of Important to the vulnerability. Information on security ratings is available at http://go.cpanel.net/securitylevels. A locally authenticated user could take advantage of the flaw to gain access to sensitive information belonging to other accounts on the system. This problem was reported to us in case 64407.

If your deployed cPanel & WHM servers are configured to automatically update when new releases are available, then no action is required. Your systems will update automatically. If you have disabled automatic updates, then you are highly encouraged to update your cPanel & WHM installs at your earliest convenience.

Releases

The following versions of cPanel & WHM address all known vulnerabilities:

* 11.36.0.20
* 11.34.1.13
* 11.32.6.4

The latest public releases of cPanel & WHM for all update tiers are published at http://httpupdate.cpanel.net.

Click Here to view the PGP Signed Message.

]]> http://cpanel.net/cpanel-whm-security-releases-for-11-32-11-34-and-11-36/feed/ 0 11.32 Impending EOL http://cpanel.net/11-32-impending-eol-2/ http://cpanel.net/11-32-impending-eol-2/#comments Wed, 20 Mar 2013 15:14:56 +0000 Sarah http://cpanel.net/?p=21742 cPanel & WHM 11.32 reaches End Of Life August 20, 2013. That means there are only 5 months left in the life cycle.

In accordance with our End of Life Policy cPanel & WHM 11.32 will continue functioning on servers after reaching End Of Life. No further updates, including security fixes, or installations will be provided for 11.32 after the End Of Life date.

cPanel & WHM 11.32 is the last version to support the following:

  • CentOS 4
  • RHEL 4
  • MySQL 4.0
  • MySQL 4.1

All customers currently using cPanel & WHM 11.32 are advised to begin planning the upgrade to cPanel & WHM 11.36 (EOL Date: March 2014). If you desire assistance with your migration plans, please contact our technical support team at https://tickets.cpanel.net/submit/. Our professional staff will help with recommendations, migration assistance and more.

GPG signed version is available

]]> http://cpanel.net/11-32-impending-eol-2/feed/ 0 11.36 Pushed to RELEASE Tier http://cpanel.net/11-36-pushed-to-release-tier/ http://cpanel.net/11-36-pushed-to-release-tier/#comments Mon, 11 Mar 2013 21:16:42 +0000 Sarah http://cpanel.net/?p=21572 March 11, 2013
Houston, TX-

cPanel Inc., announces the release of cPanel & WHM 11.36 to the RELEASE tier.

Included in this brand new release are further improvements to the update system, building on work started with cPanel & WHM 11.30. A new staging step during installation allows a variety of checks to occur prior to changing the cPanel & WHM installation. This makes both new installation, and upgrades, more reliable.

cPanel & WHM 11.36 also brings an entirely new system for managing applications, based upon the tried-and-true RPM packaging format. By distributing applications via RPM we are able to reduce cPanel & WHM installation time by 30%, on average. The new system also provides integrators and system deployers a simplified means of distributing applications with cPanel & WHM.

We are happy to announce that cPanel & WHM 11.36 brings a modern version of perl with it. Perl 5.14 is available with all versions of 11.36 and newer. This change brings an end to the older perl 5.8.8 distributed with prior versions of cPanel & WHM.

Also in cPanel & WHM 11.36 is support for Apache 2.4, provided via EasyApache. Apache 2.4 brings many new features and performance benefits to your web hosting platform.

Other features are also available in version 11.36:

The email auto discovery feature, first introduced in cPanel & WHM 11.34, has been updated with improved compatibility with existing setups.
It is now possible to display the number of files used by an account, in the cPanel Stats Bar.
The ability to track mail sent by web applications is improved through new functions to query the web server, and with X-PHP-Script functionality added to PHP.

cPanel thanks the members of our EDGE-Users community for their feedback and testing of the development releases. If you would like to join this community please GO HERE: http://go.cpanel.net/cpmailinglist

Please note, after upgrading to the new release, a downgrade to an older version will not be permitted.

About cPanel, Inc.
Since 1997, cPanel, Inc. has been a leading innovator and developer of control panel software for the web hosting industry. cPanel builds software that allows web host professionals to transform standalone servers into fully automated point-and-click web hosting platforms. cPanel licensed software allows owners of servers and websites, along with resellers and developers, to optimize their technical resources and replace tedious shell-oriented tasks with dynamic, intuitive web- based interfaces.

]]> http://cpanel.net/11-36-pushed-to-release-tier/feed/ 0 Important: cPanel & WHM 11.36, 11.34, and 11.32 Security Releases http://cpanel.net/important-cpanel-whm-11-36-11-34-and-11-32-security-releases/ http://cpanel.net/important-cpanel-whm-11-36-11-34-and-11-32-security-releases/#comments Tue, 26 Feb 2013 04:50:33 +0000 Ken http://cpanel.net/?p=21171 cPanel has released new builds for all public update tiers. These updates provide targeted changes to address security concerns with the cPanel & WHM product. These builds are currently available to all customers via the standard update system.

cPanel has rated these updates as having important security impact. Information on security ratings is available at http://go.cpanel.net/securitylevels.

If your deployed cPanel & WHM servers are configured to automatically update when new releases are available, then no action is required. Your systems will update automatically. If you have disabled automatic updates, then you are highly encouraged to update your cPanel & WHM installs at your earliest convenience.

Releases

The following versions of cPanel & WHM address all know vulnerabilities:

  • 11.36.0.10
  • 11.34.1.11
  • 11.32.6.2

The latest public releases of cPanel & WHM for all update tiers are published at http://httpupdate.cpanel.net.

Security Issue Information

The resolved security issues were identified by the cPanel security team and independent security researchers. There is no reason to believe that these vulnerabilities are known to the public. As such, cPanel will only release limited information regarding the vulnerabilities at this time.

Once sufficient time has passed to allow cPanel & WHM systems to automatically update their installed software to the new versions, cPanel will release additional information regarding the nature of the security issues. These Targeted Security Releases address 3 vulnerabilities in cPanel & WHM 11.36 and 2 vulnerabilities in cPanel & WHM 11.34 and 11.32. Additional information is scheduled to be released February 27, 2013.

For information regarding our Versions and Release Process, please read the following document:
http://docs.cpanel.net/twiki/bin/view/AllDocumentation/InstallationGuide/CpanelProductVersions.

]]> http://cpanel.net/important-cpanel-whm-11-36-11-34-and-11-32-security-releases/feed/ 0 EasyApache 3.18 in 11.36 http://cpanel.net/easyapache-3-18-in-11-36/ http://cpanel.net/easyapache-3-18-in-11-36/#comments Fri, 01 Feb 2013 20:24:00 +0000 Sarah http://cpanel.net/?p=20321 cPanel Inc., announces the release of EasyApache 3.18, our powerful and simple-to-use script that you can use to update and configure your Apache web server.

The most important feature of this new release is Apache 2.4, the latest version of the Apache web server. However, we have made a few important changes to Apache 2.4 to ensure as smooth an upgrade as possible for you, so it is important that you review the changes at: http://docs.cpanel.net/twiki/bin/view/EasyApache/Apache/Apache24Issues

The script wrappers for the Apache and PHP modules installed by EasyApache have been changed to handle the new Perl distribution.

Several important Apache modules have been upgraded and improved as part of this release, such as ModSecurity and ModHostinglimits.

And as part of our overall documentation improvement effort, we have moved EasyApache’s documentation to a new directory at http://docs.cpanel.net/twiki/bin/view/EasyApache/

For more details, please visit our EasyApache Release Notes at http://docs.cpanel.net/twiki/bin/view/EasyApache/

About cPanel Inc. Since 1997, cPanel, Inc. has been a leading innovator and developer of control panel software for the web hosting industry. cPanel builds software that allows web host professionals to transform standalone server into fully automated point-and-click web hosting platforms. cPanel licensed software allows owners of servers and websites, along with resellers and developers, to optimize their technical resources and replace tedious shell-oriented tasks with dynamic, intuitive web-based interfaces.

]]> http://cpanel.net/easyapache-3-18-in-11-36/feed/ 0 cPanel & WHM 11.36, CURRENT Tier Release http://cpanel.net/cpanel-whm-11-36-current-tier-release/ http://cpanel.net/cpanel-whm-11-36-current-tier-release/#comments Mon, 28 Jan 2013 18:07:19 +0000 Sarah http://cpanel.net/?p=20102 January 28, 2013
Houston, TX-

cPanel Inc., announces the release of cPanel & WHM 11.36 to the CURRENT tier.

Included in this brand new release are further improvements to the update system, building on work started with cPanel & WHM 11.30. A new staging step during installation allows a variety of checks to occur prior to changing the cPanel & WHM installation. This makes both new installation, and upgrades, more reliable.

cPanel & WHM 11.36 also brings an entirely new system for managing applications, based upon the tried-and-true RPM packaging format. By distributing applications via RPM we are able to reduce cPanel & WHM installation time by 30%, on average. The new system also provides integrators and system deployers a simplified means of distributing applications with cPanel & WHM.

We are happy to announce that cPanel & WHM 11.36 brings a modern version of Perl with it. Perl 5.14 is available with all versions of 11.36 and newer. This change brings an end to the older Perl 5.8.8 distributed with prior versions of cPanel & WHM.

This release also lays the groundwork for Apache 2.4, which will appear shortly with the release of EasyApache 3.18.

Other features are also available in version 11.36:

The Email Auto Discovery feature, first introduced in cPanel & WHM 11.34, has been updated with improved compatibility with existing setups.
It is now possible to display the number of files used by an account, in the cPanel Stats Bar.
The ability to track mail sent by web applications is improved through new functions to query the web server, and with X-PHP-Script functionality added to PHP.

cPanel thanks the members of our EDGE-Users community for their feedback and testing of the development releases. If you would like to join this community please GO HERE: http://cpanel.net/mailing-lists/.

For more details, please visit our Release Site: http://releases.cpanel.net
and our Documentation Notes: http://docs.cpanel.net/twiki/bin/view/AllDocumentation/1136ReleaseNotes

Please note, after upgrading to the new release, a downgrade to an older version will not be permitted.

About cPanel, Inc.
 Since 1997, cPanel, Inc. has been a leading innovator and developer of control panel software for the web hosting industry. cPanel builds software that allows web host professionals to transform standalone servers into fully automated point-and-click web hosting platforms. cPanel licensed software allows owners of servers and websites, along with resellers and developers, to optimize their technical resources and replace tedious shell-oriented tasks with dynamic, intuitive web- based interfaces.

]]> http://cpanel.net/cpanel-whm-11-36-current-tier-release/feed/ 0