Server Software Update Notification: 10-30-2010

Important: This document contains information for the group of server updates (or dist) occurring November 1, 2010 through November 03, 2010 in all datacenters. Until that time, all of the information included in this document is subject to change.

Important updates in this Notification:

The following updates affect popular or important services and programs:

• ClamAV (Linux)
• OpenSSL (v3)
• Enhanced Webmail (BETA) - Discontinued (Linux, v3, and v2)
• Miva Empresa (Linux and v3)
• Miva Empresa (Linux and v3)

Linux MPS/VPS

The following updates will be made to the Linux MPS/VPS platform.

Important services to be restarted:

The following services will be restarted by Verio as part of the update:

• ClamAV

Possible Action Needed

The following Linux MPS/VPS updates may require additional attention or action to take advantage of the full benefits of the update. Any possible actions are listed at the end of the individual update information.

ClamAV-0.96.3

ClamAV will be updated to version 0.96.3 to address inefficiencies within the existing version of ClamAV.

Additionally, to better optimize account and server resources, the non milter option will default to use clamdscan. If you are currently using clamscan, it is recommended that you upgrade to the latest version of ClamAV to receive the benefits of clamdscan.

To upgrade to ClamAV 0.96.3, please run the following from the command prompt:

# vinstall clamav

PHP-5.2.14

The vinstall for PHP5 will be upgraded to version 5.2.14 for PCI Compliance and to address the security vulnerabilities (CVE-2010-2484, CVE-2010-2225, and CVE-2010-0397) discussed here:

http://www.php.net/ChangeLog-5.php#5.2.14

To upgrade existing installations of PHP5, connect to your server through SSH and execute the following from the command prompt:

# vinstall php5

In addition the Chasen, Kakasi, and Mamazu PHP extensions will link into the latest revision of php5.2x.

phpMyAdmin-3.3.5

phpMyAdmin will be upgraded to version 3.3.5.

To upgrade existing installations of phpMyAdmin, connect to your server through SSH and execute the following from the command prompt:

# vinstall phpmyadmin

No Action Needed

The following Linux MPS/VPS updates do not require action by customers to take advantage of the full benefits of the update. Some services may be rebooted as part of the update.

Enhanced Webmail (BETA) – Discontinued

As a result of direct feedback, Enhanced Webmail will not be included as part of our solutions portfolio and we will be discontinuing this beta program effective immediately. We encourage you to uninstall this application as soon as possible.

To uninstall Enhanced Webmail, please run the following from the command prompt:

# vuninstall enhancedwebmail

- When prompted select ‘a’ to uninstall for all domains and hit return.
When prompted select ‘yes’ when asked to remove the database and configuration files and hit return.

Enhanced Webmail will be terminated as a beta product in November 2010 and after this date you will no longer have access to this application.

Mivavm-5.08

Miva Empressa will be upgraded to version 5.08.

Wordpress vinstall

The Wordpress vinstall script will be updated to work with Mysql5.1. In addition, the Wordpress uninstall script will also be updated to now remove Mysql.

Mysql 5.1.x

The mysql vinstall script (vinstall mysql) will be updated to install Mysql version 5.1x. Previously the mysql vinstall script would install Mysql version 5.0. In addition, the script will be updated to correct a problem with the innodb enable/disable options to restart mysql properly. The Mysql uninstall script will be updated to now remove Mysql5.1x.

Oci8 extension

The oci8 extension for PHP-5.2.14 will be updated to correct a problem where the extension was failing to connect to the db.

FreeBSD MPS/VPS v3

The following updates will be made to the FreeBSD VPS/MPS v3 platform.

Important services to be restarted:

The following services will be restarted by Verio as part of the update:

• Apache

Possible Action Needed

The following VPS/MPS v3 updates may require additional attention or action to take advantage of the full benefits of the update. Any possible actions are listed at the end of the individual update information.

PHP-5.2.14

The vinstall for PHP5 will be upgraded to version 5.2.14 for PCI Compliance and to address the security vulnerabilities (CVE-2010-2484, CVE-2010-2225, and CVE-2010-0397) discussed here:

http://www.php.net/ChangeLog-5.php#5.2.14

To upgrade existing installations of PHP5, connect to your server through SSH and execute the following from the command prompt:

# vinstall php5

In addition the Chasen, Kakasi, and Mamazu PHP extensions will link into the latest revision of php5.2x.

Mysql-5.1.50

The Mysql vinstall will be upgraded to version 5.1.50.

To upgrade existing installations of mysql, connect to your server through SSH and execute the following from the command prompt:

# vinstall mysql

The Mysql uninstall script will be updated to now remove Mysql5.1x.

phpMyAdmin-3.3.5

phpMyAdmin will be upgraded to version 3.3.5.

To upgrade existing installations of phpMyAdmin, connect to your server through SSH and execute the following from the command prompt:

# vinstall phpmyadmin

phpPgAdmin

phpPgAdmin will be upgraded to version 4.2.3. In addition, the updated version will also correct a problem where the install would fail to enable the 'gettext' PHP extension.

To upgrade existing installations of phpPgAdmin, connect to your server through SSH and execute the following from the command prompt:

# vinstall phppgadmin

Mailman-2.1.12

The vinstall for Mailman will be upgraded to version 2.1.12. This upgrade will also correct other installation problems including issues with the startup script not working and missing images.

To upgrade existing installations of mailman, connect to your server through SSH and execute the following from the command prompt:

# vinstall mailman

No Action Needed

The following VPS/MPS v3 updates do not require action by customers to take advantage of the full benefits of the update. Some services may be rebooted as part of the update.

OpenSSL-1.0.0a

OpenSSL will be upgraded to version 1.0.0a for PCI compliance and to address security vulnerabilities (CVE-2010-0433, CVE-2010-0740, CVE-2010-0742, and CVE-2010-1633). This version is ABI compatible with the previous 0.9.8n release.

Enhanced Webmail (BETA) – Discontinued

As a result of direct feedback, Enhanced Webmail will not be included as part of our solutions portfolio and we will be discontinuing this beta program effective immediately. We encourage you to uninstall this application as soon as possible.

To uninstall Enhanced Webmail, please run the following from the command prompt:

# vuninstall enhancedwebmail

- When prompted select ‘a’ to uninstall for all domains and hit return.
- When prompted select ‘yes’ when asked to remove the database and configuration files and hit return.

Enhanced Webmail will be terminated as a beta product in November 2010 and after this date you will no longer have access to this application.

Mivavm-5.08

Miva Empressa will be upgraded to version 5.08.

Proftpd-1.3.3a

Proftpd will be upgraded to version 1.3.3a.

cURL-7.21.1

cURL will be upgraded to version 7.21.1.

Apache-2.2.15

Apache2 will be updated with the new version of OpenSSL to address the security vulnerabilities with older OpenSSL versions.

Apache-1.3.42

Apache1.x will be updated with the new version of OpenSSL to address the security vulnerabilities with older OpenSSL versions.

OpenSSL PHP extension

The OpenSSL extension for PHP-5.2.14 will be updated.

Oci8 PHP extension

The oci8 extension for PHP-5.2.14 will be updated to correct a problem where the extension was failing to connect to the db.

mod_perl

The mod_perl vuninstall script will be updated to prohibit mod_perl from being uninstalled in certain circumstances.

FreeBSD MPS/VPS v2

The following updates will be made to the FreeBSD VPS/MPS v2 platform.

No Action Needed

The following VPS/MPS v2 updates do not require action by customers to take advantage of the full benefits of the update. Some services may be rebooted as part of the update.

Enhanced Webmail (BETA) – Discontinued

As a result of direct feedback, Enhanced Webmail will not be included as part of our solutions portfolio and we will be discontinuing this beta program effective immediately. We encourage you to uninstall this application as soon as possible.

To uninstall Enhanced Webmail, please run the following from the command prompt:

# vuninstall enhancedwebmail

- When prompted select ‘a’ to uninstall for all domains and hit return.
- When prompted select ‘yes’ when asked to remove the database and configuration files and hit return.

Enhanced Webmail will be terminated as a beta product in November 2010 and after this date you will no longer have access to this application.

mod_perl

The mod_perl vuninstall script will be updated to prohibit mod_perl from being uninstalled in certain circumstances.

Note: This notification reflects the best knowledge of code and feature updates for this release. Changes can be made to the information herein; these changes will be distributed in new notifications. AlpineWeb might make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time.