Server Software Update Notification: 08-15-2007
Important updates in this Notification:
- Firewall for MPS/VPSv3
- SpamAssassin for MPS/VPSv3 and MPS/VPSv2
- Apache for MPS/VPSv3
- ClamAV for MPS/VPSv3 and MPS/VPSv2
- OpenSSH for MPS/VPSv3, MPS/VPSv2 and Signature
- PCRE for MPS/VPSv3
- Accrisoft for MPS/VPSv2
- MySQL for Signature
The following updates (or "dist") will be completed 08/15/2007 on all servers:
FreeBSD MPS/VPS v3:
- Software Firewall
- The proprietary and customized software firewall will be updated to support the IPv6 protocol. This includes the proprietary set_fwlevel and industry-standard ipf commands. No action needed.
- SpamAssassin
- The vinstall for the SpamAssassin mail filter will be updated to correctly set permissions for the /var/mail/spam file for global configurations. For those installations with global configurations delivering all spam to a file such as /var/mail/spam, to configure your file, connect to your server through SSH and execute the following from the command prompt:
# chmod 666 /var/mail/spam
- ClamAV
- The vinstall for ClamAV, a GPL virus scanner, will be updated to install version 0.91.1. This version brings the utility to the most current stable release and addresses security issues with clamav-milter. More information about these and other updates in version 0.91.1 can be found here:
http://sourceforge.net/project/shownotes.php?release_id=523634&group_id=86638
To update existing installations or to install ClamAV, connect to your server through SSH and execute the following command from the prompt:
# vinstall clamav
- OpenSSH
- The portable OpenSSH connectivity version 4.6.p1,1 will be rebuilt. This addresses issues discussed here:
http://bugzilla.mindrot.org/show_bug.cgi?id=1306
No action needed.
- PHP 4.x
- The vinstall for the PHP: Hypertext Preprocessor scripting language for version 4.x will be updated to address issues with the LoadModule setting in the Web server configuration file. No action needed.
- PHP 5.x
- The vinstall for the PHP: Hypertext Preprocessor scripting language for version 5.x will be updated to address issues with the LoadModule setting in the Web server configuration file. No action needed.
The vinstall will also be updated to remove libmm support from the session extension to address issues with memory usage. To update existing installations, connect to your server through SSH and execute the following from the command line:
vinstall php5
- Apache
- The proprietary restart_apache command to restart the Apache Web server will be updated to wait five minutes if needed for processes to terminate. No action needed.
- PCRE Library
- The PCRE regular expression library will be updated to version 7.2. This version brings the library to the most current FreeBSD version and addresses issues with configuration. More information about version 7.2 can be found at these pages:
No action needed.
- libarchive
- The libarchive archiving utility will be updated to address the FreeBSD-SA-07:05 security vulnerability. More information about the vulnerability can be found here:
http://security.freebsd.org/advisories/FreeBSD-SA-07:05.libarchive.asc
No action needed.
- named
- The named caching name server will be updated to address the FreeBSD-SA-07:02 security vulnerability. More information about the vulnerability can be found here:
http://security.freebsd.org/advisories/FreeBSD-SA-07:02.bind.asc
The caching name server will be restarted as part of this update.
No action needed.
- vnl
- The vnl command-line file deletion utility will be updated to address issues with log file sizes and log selection. No action needed.
- Portupgrade
- The Index-6.db file used by the Portupgrade FreeBSD ports/packages administration and management tool suite will be updated to reflect current packages and dependencies. No action needed.
- KornShell
- The KornShell (ksh) command and programming language will be updated to version 20070628. This version brings the utility to the most current FreeBSD version. More information about version 20070628 can be found here:
http://www.freshports.org/commit.php?category=shells&port=ksh93& ...
No action needed.
- IO::Compress::Base
- The IO::Compress::Base Perl module will be updated to version 2.005. This version brings the module to the most current version and addresses issues with gunzip and XML. More information about version 2.005 can be found here:
http://search.cpan.org/src/PMQS/IO-Compress-Base-2.005/Changes
No action needed.
- Compress::Zlib
- The Compress::Zlib Perl module will be updated to version 2.005. This version brings the module to the most current version. More information about version 2.005 can be found here:
http://search.cpan.org/src/PMQS/Compress-Zlib-2.005/Changes
No action needed.
- IO::Compress::Zlib
- The IO::Compress::Zlib Perl module will be updated to version 2.005. This version brings the module to the most current version. More information about version 2.005 can be found here:
http://search.cpan.org/src/PMQS/IO-Compress-Zlib-2.005/Changes
No action needed.
- Compress::Raw::Zlib
- The Compress::Raw::Zlib Perl module will be updated to version 2.005. This version brings the module to the most current version. More information about version 2.005 can be found here:
http://search.cpan.org/src/PMQS/Compress-Raw-Zlib-2.005/Changes
No action needed.
- Ruby
- The Ruby object-oriented scripting language with support for the Oniguruma regular expression library will be updated to version 1.8.6_2,1. This version brings the language to the most current FreeBSD version and addresses port issues. More information about version 1.8.6_2,1 can be found at these pages:
No action needed.
- Portupgrade
- The Portupgrade FreeBSD ports/packages administration and management tool suite will be updated to version 2.3.1,2. This version brings the utility to the most current FreeBSD version. More information about version 2.3.1,2 can be found here:
http://www.freshports.org/commit.php?category=ports-mgmt&port=portupgrade ...
No action needed.
- pkg-config
- The pkg-config installed libraries utility will be updated to version 0.22. This version brings the utility to the most current FreeBSD version and addresses issues with configuration. More information about version 0.22 can be found here:
No action needed.
- mkfontdir
- The mkfontdir font index utility will be updated to version 1.0.3. This version brings the utility to the most current FreeBSD version. More information about version 1.0.3 can be found here:
http://beta.freshports.org/commit.php?category=x11-fonts&port=mkfontdir ...
No action needed.
- Makedepend
- The makedepend makefile dependency generator will be updated to version 1.0.1,1. This version brings the utility to the most current FreeBSD version. More information about version 1.0.1,1 can be found here:
http://beta.freshports.org/commit.php?category=devel&port=makedepend ...
No action needed.
- JasPer
- The JasPer implementation of the JPEG-2000 standard specification will be updated to version 1.900.1_5. This version brings the utility to the most current FreeBSD version and addresses issues with options. More information about version 1.900.1_5 can be found here:
http://www.freshports.org/commit.php?category=graphics&port=jasper ...
No action needed.
- Netpbm
- The Netpbm graphics software package will be updated to version 10.26.44. This version brings the utility to the most current FreeBSD version. More information about version 10.26.44 can be found here:
http://www.freshports.org/commit.php?category=graphics&port=netpbm ...
No action needed.
- X11 Applications
- The X.Org Applications library for the X11 Windows System will be updated to version 7.2_2. Associated libraries and utilities will also be updated. This version addresses issues with configuration and errors. More information about version 7.2_2 can be found here:
No action needed.
- OpenGL
- The libGL OpenGL library will be updated to version 7.0. This version brings the library to the most current FreeBSD version and addresses issues with 64-bit systems. More information about version 7.0 can be found here:
http://www.freshports.org/commit.php?category=graphics&port=libGL ...
No action needed.
- Net::DNS
- The Net::DNS Perl module collection will be updated to version 0.60. This version brings the collection to the most current FreeBSD version and addresses security issues (CVE-2007-3377 and CVE-2007-3409), discussed here:
More information about version 0.60 can be found here:
http://www.freshports.org/commit.php?category=dns&port=p5-Net-DNS ...
No action needed.
- Metamail
- The vuninstall for the metamail email utility will be updated to correctly interact with various versions. This update affects the vuninstall only. No action needed.
- Mailman
- The vinstall for Mailman, the GNU Mailing List Manager, will be updated to install version 2.1.9_3. This version brings the utility to the most current version and addresses issues with courier support. More information about version 2.1.9_3 can be found here:
http://www.freshports.org/commit.php?category=mail&port=mailman ...
To update existing installations, make a backup of any existing configuration or lists, uninstall the utility, then reinstall by connecting to your server through SSH and executing the following from the command prompt:
vinstall mailman
- Procmail
- The vinstall for the Procmail email processing utility will be updated to address path issues. This update affects the vinstall only. No action needed.
- Sudo
- The sudo (superuser do) utility will be updated to version 1.6.9_1. This updates the utility and addresses issues with segmentation faults and sessions. More information about version 1.6.9_1 can be found here:
http://www.freshports.org/commit.php?category=security&port=sudo ...
- OpenLDAP Client
- The OpenLDAP client will be updated to version 2.3.37. This version brings the utility to the most current FreeBSD version and addresses issues with slapd, slapo, and documentation issues. More information about version 2.3.37 can be found here:
http://www.openldap.org/lists/openldap-announce/200707/msg00000.html
No action needed.
- Xterm
- The xterm terminal emulator will be updated to version 227. This version updates the utility and addresses issues with menus and operating systems. More information about version 227 can be found here:
http://dickey.his.com/xterm/xterm.log.html#xterm_227
No action needed.
FreeBSD MPS/VPS v2:
- SpamAssassin
- The vinstall for the SpamAssassin mail filter will be updated to correctly set permissions for the /var/mail/spam file for global configurations. For those installations with global configurations delivering all spam to a file such as /var/mail/spam, to configure your file, connect to your server through SSH and execute the following from the command prompt:
# chmod 666 /var/mail/spam
- ClamAV
- The vinstall for ClamAV, a GPL virus scanner, will be updated to install version 0.91.1. This version brings the utility to the most current stable release and addresses security issues with clamav-milter. More information about these and other updates in version 0.91.1 can be found here:
http://sourceforge.net/project/shownotes.php?release_id=523634&group_id=86638
To update existing installations or to install ClamAV, connect to your server through SSH and execute the following command from the prompt:
# vinstall clamav
- OpenSSH
- The portable OpenSSH connectivity version 4.6.p1,1 will be rebuilt. This addresses issues discussed here:
http://bugzilla.mindrot.org/show_bug.cgi?id=1306
No action needed.
- PHP 4.x
- The vinstall for the PHP: Hypertext Preprocessor scripting language for version 4.x will be updated to address issues with the LoadModule setting in the Web server configuration file. No action needed.
- Accrisoft
- The Accrisoft Freedom installation process will be updated to install version 5.7.123a. This version updates the package to the latest version. More information about version 5.7x can be found here:
http://www.accrisoft.com/index.php?src=news&refno=16&category=Hot%20News
No action needed.
- vnl
- The vnl command-line file deletion utility will be updated to address issues with log file sizes and log selection. No action needed.
- Metamail
- The vuninstall for the metamail email utility will be updated to correctly interact with various versions. This update affects the vuninstall only. No action needed.
- Mailman
- The vinstall for Mailman, the GNU Mailing List Manager, will be updated to install version 2.1.9_3. This version brings the utility to the most current version and addresses issues with courier support. More information about version 2.1.9_3 can be found here:
http://www.freshports.org/commit.php?category=mail&port=mailman ...
To update existing installations, make a backup of any existing configuration or lists, uninstall the utility, then reinstall by connecting to your server through SSH and executing the following from the command prompt:
# vinstall mailman
The vinstall will also be updated to address issues with install text. No action needed.
- Procmail
- The vinstall for the Procmail email processing utility will be updated to address path issues. This update affects the vinstall only. No action needed.
Signature Hosting:
- Email
- Email filters will be updated, to so that customers can set filters to allow or deny specific text in the subject line. A customer can type in a text string and choose either "Exactly Matches” or "Doesn’t Exactly Match” and filter mail based on that text.
No action needed.
- VIM-lite
- The VIM-lite editor will be updated to version 7.1.18. More information about version 7.1.18 can be found here:
http://tech.groups.yahoo.com/group/vimannounce/message/178
No action needed.
- MySQL
- MySQL will be updated from 4.1.21 to 4.1.22. This upgrade, associated with other changes, will provide more stability for the MySQL server. For a list of features associated with this upgrade, see:
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-22.html
No action needed.
- PEAR Table and Form Modules
- The PEAR (PHP Extension and Application Repository) HTML_Form module for PHP 4.x and PEAR HTML_Table and HTML_Form modules for PHP 5.x have been added to the system. More information about PEAR can be found at:
http://pear.php.net/packages.php?catpid=10&catname=HTML
No action needed.
- OpenSSH
- OpenSSH will be updated to version 4.6.p1. This brings the system to the most current OpenSSH version. More information about version 4.6.p1 can be found at:
http://www.openssh.com/txt/release-4.6
No action needed.
Note: This
notification could include technical inaccuracies or typographical errors. Changes can be made to the information herein;
these changes will be distributed in new notifications. AlpineWeb might make improvements and/or changes in the product(s)
and/or the program(s) described in this publication at any time.
|
|