Server Software Update Notification: 06-06-2011

Important: This document contains information for the group of server updates (or dist) occurring June 6th, 2011 through June 8th, 2001in all datacenters. Until that time, all of the information included in this document is subject to change.

Action Needed

Most VPS and MPS updates do not require action by customers to receive the full benefits of the update. Some updates may require action by customers to receive all benefits of the update, but usually this action is optional, such as updating to the latest version of software. Updates for each platform in this document are grouped together according to any (optional) action needed or no action needed, with those updates possibly requiring action listed first.

Important updates in this Notification:

The following updates affect popular or important services and programs:

• Shopsite (Linux)
• phpMyAdmin (Linux and v3)
• PHP-5.3.6 (Linux and v3)
• WordPress (Linux and v3)
• ProFTPD (Linux and v3)

Linux VPS/MPS

The following updates will be made to the Linux VPS/MPS platform.

Possible Action Needed

The following Linux VPS/MPS updates may require additional attention or action to take advantage of the full benefits of the update. Any possible actions are listed at the end of the individual update information.

PHP-5.3.6

The vinstall for PHP 5.3 will be upgraded to version 5.3.6.
To upgrade existing installations of PHP 5.3.x, connect to your server through SSH and execute the following from the command prompt:

# vinstall php5.3

phpMyAdmin

The vinstall for phpMyAdmin will be upgraded to the latest versions. The vinstall will install phpMyAdmin version 3.3.10 if PHP5 and MySQL5 are running, otherwise the vinstall will install phpMyAdmin version 2.11.11.3.

To upgrade existing installations of phpMyAdmin, connect to your server through SSH and execute the following from the command prompt:

# vinstall phpmyadmin

WordPress-3.1

The WordPress vinstall will be upgraded to version 3.1.

To upgrade existing installations of WordPress, connect to your server through SSH and execute the following from the command prompt:

# vinstall wordpress

No Action Needed

The following Linux VPS/MPS updates do not require action by customers to take advantage of the full benefits of the update. Some services may be rebooted as part of the update.

Shopsite-v10-sp2r2

Shopsite will be upgraded to version v10-sp2r2 for new installations only.

To upgrade existing installations contact your Account Manager.

ProFTPD-1.3.3e

ProFTPD will be upgraded to the latest revision of version 1.3.3 to address the security vulnerabilities CVE-2011-1137 & CVE-2011-0411 discussed here:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1137
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411

Dovecot

The Dovecot vinstall will be updated to address a bug with its procmail definitions. Now the vinstall will spell out the RHS for MAILDIR and ORGMAIL.

Server Update The following Linux VPS/MPS updates will run at the physical server level.

runaway_watcher

Runaway watcher will detect abusive Spamassassin and ClamAV processes. Once detected it will auto cleanup and restart the application as needed. In addition, customers running clamscan will be auto converted to ClamAV milter.

FreeBSD VPS/MPS v3

The following updates will be made to the FreeBSD VPS/MPS v3 platform.

Possible Action Needed The following VPS/MPS v3 updates may require additional attention or action to take advantage of the full benefits of the update. Any possible actions are listed at the end of the individual update information.

PHP-5.3.6

The vinstall for PHP 5.3 will be upgraded to version 5.3.6.

To upgrade existing installations of PHP 5.3.x, connect to your server through SSH and execute the following from the command prompt:

# vinstall php5.3

phpMyAdmin

The vinstall for phpMyAdmin will be upgraded to the latest versions. The vinstall will install phpMyAdmin version 3.3.10 if PHP5 and MySQL5 are running, otherwise the vinstall will install phpMyAdmin version 2.11.11.3.

To upgrade existing installations of phpMyAdmin, connect to your server through SSH and execute the following from the command prompt:

# vinstall phpmyadmin

WordPress-3.1

The WordPress vinstall will be upgraded to version 3.1.

To upgrade existing installations of WordPress, connect to your server through SSH and execute the following from the command prompt:

# vinstall wordpress

mtop-0.6.6_2

The mtop vinstall will be upgraded to version 0.6.6_2.

To upgrade existing installations of mtop, connect to your server through SSH and execute the following from the command prompt:

# vinstall mtop

No Action Needed The following VPS/MPS v3 updates do not require action by customers to take advantage of the full benefits of the update. Some services may be rebooted as part of the update.

Shopsite-v10-sp2r2

Shopsite will be upgraded to version v10-sp2r2 for new installations only.

To upgrade existing installations contact your Account Manager.

ProFTPD-1.3.3e

ProFTPD will be upgraded to the latest revision of version 1.3.3 to address the security vulnerabilities CVE-2011-1137 & CVE-2011-0411 discussed here:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1137
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411

Ruby+nopthreads-1.8.7.334,1

Ruby will be upgraded to version 1.8.7.334,1.

iManager

The iManager vinstall will be removed. iManager has successfully served our customers over the years, however with the availability of CPX and CPANEL, customers can now benefit from utilizing the most current and advanced control panel technologies available on the market today. Verio development, maintenance and support will be discontinued for this application. We recommend customers consider CPX or CPANEL as alternatives to iManager.

Dovecot

The Dovecot vinstall will be updated to address a bug with the associated procmail definitions. Now the vinstall spell out the RHS for MAILDIR and ORGMAIL.

Server Update

The following Linux VPS/MPS updates will run at the physical server level

runaway_watcher

Runaway watcher will detect abusive Spamassassin and ClamAV processes. Once detected it will auto cleanup and restart the application as needed. In addition, customers running clamscan will be auto converted to ClamAV milter.

Note: This notification could include technical inaccuracies or typographical errors. Changes can be made to the information herein; these changes will be distributed in new notifications. AlpineWeb might make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time.