09/26/06 - (VDS) cPanel Security Update

[tomp]

We have recently released an updated security patch for RELEASE/STABLE.
This patch includes the same protections (updated wrapper) that were added to the CURRENT/EDGE trees. We recommend updating all RELEASE and STABLE boxes with this patch. Please note that all boxes will be automatically updated with this patch during tonight's update if automatic updates are enabled.

To apply this patch:
wget -q -O - http://layer1.cpanel.net/installer/sec092506.pl | perl or /scripts/upcp Please note that you will not need to patch new installs.

Thank You
cPanel Development Team

[Jeff]

cPanel updates for all branches were released last night. It appears cpwrap and mysqladmin have more changes to them.

http://layer1.cpanel.net



STABLE
10.9.0-STABLE_35
(Wed Sep 27 21:23:03 2006)

RELEASE
10.9.0-RELEASE_34
(Wed Sep 27 21:47:33 2006)

CURRENT
10.9.0-CURRENT_33
(Wed Sep 27 21:37:04 2006)

EDGE
11.0-EDGE_502
(Wed Sep 27 09:35:00 2006)

[Jeff]

I would also like to point out that SquirrelMail 1.4.8 (http://www.squirrelmail.org/) is also included in this latest release, which addresses a security issue (http://www.gulftech.org/?node=research&article_id=00108-08112006) and contains several other bug fixes (http://www.squirrelmail.org/changelog.php).