Server Software Update Notification: 06-24-2008

• MySQL 4.1.x for Linux and v3
• MySQL 5.0.x for Linux and v3
• Enhanced Webmail for Linux and v3
• ClamAV for Linux
• Python for Linux and v3
• PCRE for v3
• Ruby on Rails for v3

Linux MPS/VPS:

MySQL 4.1.x

The vinstall for the MySQL database management system version 4.1.x will be updated to disable InnoDB support by default. InnoDB support is rarely used by applications, with the Accrisoft Freedom product being the most popular application using InnoDB support on MPS/VPS accounts. However, InnoDB consumes a large amount of memory. Disabling InnoDB for accounts that do not require it reduces the memory footprint of MySQL considerably. The vinstall will now add the following line to the /etc/my.cnf file for accounts that do not have Accrisoft Freedom:

skip-innodb

This update affects the vinstall only. If you do not use an application such as Accrisoft Freedom that requires InnoDB, future updates will remove the configuration for existing accounts. If you would like to manually remove the configuration now, edit the /etc/my.cnf file to add the above line anywhere after [mysqld] and before [mysql.server]. Then restart the MySQL server by using the following command at the command prompt:

# service mysql restart

MySQL 5.0.x

The vinstall for the MySQL database management system version 5.0.x will be updated to disable InnoDB support by default. InnoDB support is rarely used by applications, with the Accrisoft Freedom product being the most popular application using InnoDB support on MPS/VPS accounts. However, InnoDB consumes a large amount of memory. Disabling InnoDB for accounts that do not require it reduces the memory footprint of MySQL considerably. The vinstall will now add the following line to the /etc/my.cnf file for accounts that do not have Accrisoft Freedom:

skip-innodb

This update affects the vinstall only. If you do not use an application such as Accrisoft Freedom that requires InnoDB, future updates will remove the configuration for existing accounts. If you would like to manually remove the configuration now, edit the /etc/my.cnf file to add the above line anywhere after [mysqld] and before [mysql.server]. Then restart the MySQL server by using the following command at the command prompt:

# service mysql restart

Mailman

The vinstall and vuninstall for Mailman, the GNU Mailing List Manager will be updated to correct information about default list aliases. This affects the vinstall and vuninstall only. No action needed.

The vinstall will also be updated to install version 2.1.5.1. This version addresses security issues discussed in CVE-2008-0564 here:

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0564

To update existing installations, make a backup of any existing configuration or lists, uninstall the utility, then reinstall by connecting to your server through SSH and executing the following from the command prompt:

# vinstall mailman

ClamAV

The vinstall for ClamAV, a GPL virus scanner, will be updated to install version 0.93. This version addresses issues with can limits, filetype detection, HTML scanning, and several other issues.. The ClamAV daemon process will be restarted as part of this update. No action needed for existing installations.

The vinstall will also be updated to address problems with configuration file settings which can cause error messages.

To update existing configuration files or install ClamAV, connect to your server through SSH and execute the following command from the prompt:

# vinstall clamav

Python

The Python programming language version 2.3 will be updated to address security concerns. No action needed.

Enhanced Webmail (beta)

Note: This is a beta release and at this time the software should not be used for mission-critical projects. At this time Enhanced Webmail is only provided in English.

The vinstall for Enhanced Webmail will be updated to address issues with Japanese language support. To update Enhanced Webmail, connect to your server through SSH and execute the following from the command prompt:

# vuninstall enhancedwebmail

# vinstall enhancedwebmail

FreeBSD MPS/VPS v3:

MySQL 4.1.x

The vinstall for the MySQL database management system version 4.1.x will be updated to disable InnoDB support by default. InnoDB support is rarely used by applications, with the Accrisoft Freedom product being the most popular application using InnoDB support on MPS/VPS accounts. However, InnoDB consumes a large amount of memory. Disabling InnoDB for accounts that do not require it reduces the memory footprint of MySQL considerably. The vinstall will now add the following line to the /etc/my.cnf file for accounts that do not have Accrisoft Freedom:

skip-innodb

This update affects the vinstall only. If you do not use an application such as Accrisoft Freedom that requires InnoDB, future updates will remove the configuration for existing accounts. If you would like to manually remove the configuration now, edit the /etc/my.cnf file to add the above line anywhere after [mysqld] and before [mysql.server]. Then restart the MySQL server by using the following command at the command prompt:

# /usr/local/etc/rc.d/mysql-server restart

MySQL 5.0.x

The vinstall for the MySQL database management system version 4.1.x will be updated to disable InnoDB support by default. InnoDB support is rarely used by applications, with the Accrisoft Freedom product being the most popular application using InnoDB support on MPS/VPS accounts. However, InnoDB consumes a large amount of memory. Disabling InnoDB for accounts that do not require it reduces the memory footprint of MySQL considerably. The vinstall will now add the following line to the /etc/my.cnf file for accounts that do not have Accrisoft Freedom:

skip-innodb

This update affects the vinstall only. If you do not use an application such as Accrisoft Freedom that requires InnoDB, future updates will remove the configuration for existing accounts. If you would like to manually remove the configuration now, edit the /etc/my.cnf file to add the above line anywhere after [mysqld] and before [mysql.server]. Then restart the MySQL server by using the following command at the command prompt:

# /usr/local/etc/rc.d/mysql-server restart

Enhanced Webmail (beta)

Note: This is a beta release and at this time the software should not be used for mission-critical projects. At this time Enhanced Webmail is only provided in English.

The vinstall for Enhanced Webmail will be updated to address issues with Japanese language support. To update Enhanced Webmail, connect to your server through SSH and execute the following from the command prompt:

# vuninstall enhancedwebmail

# vinstall enhancedwebmail

Mailman

The vinstall and vuninstall for Mailman, the GNU Mailing List Manager will be updated to correct information about default list aliases. This affects the vinstall and vuninstall only. No action needed.

The vinstall will also be updated to install version 2.1.10. This version addresses security issues discussed in CVE-2008-0564 here:

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0564

To update existing installations, make a backup of any existing configuration or lists, uninstall the utility, then reinstall by connecting to your server through SSH and executing the following from the command prompt:

# vinstall mailman

Python

The Python programming language version 2.3, 2.4, and 2.5 will be updated to address security concerns discussed in CVE-2008-1721. To update existing installations, connect to your server through SSH and execute one of the following commands (depending on the version):

# vinstall python-2.3

# vinstall python-2.4

# vinstall python-2.5

Samba 3

The vinstall for the Samba SMB/CIFS software suite for file and print services will be updated to install version 3.0.28a. This version addresses security concerns discussed in CVE-2007-6015. This update affects the vinstall only. To update existing installations, make a backup of your configurations, uninstall the application, then re-install the application by connecting to your server through SSH and executing the following command from the prompt:

# vinstall samba3

Tcl

The vinstall for the Tcl scripting language will be updated to install version 8.4.19,1. This version addresses security concerns discussed in CVE-2008-1721. To update existing installations, connect to your server through SSH and execute the following command from the prompt:

# vinstall tcl

Ruby on Rails

The vinstall for the Ruby on Rails web framework will be updated to address security concerns discussed in CVE-2007-3227. To update existing installations, make a backup of your configurations, uninstall the application, then re-install the application by connecting to your server through SSH and executing the following command from the prompt:

# vinstall rails

vrmuser

The proprietary vrmuser command-line utility to remove users will be updated to address issues with directory permissions when removing users and the directories they own. This update affects the utility only. No action needed.

Portupgrade

The Index-6.db file used by The Portupgrade FreeBSD ports/packages administration management tool suite will be updated to reflect current packages and dependencies. Some package and port timestamps will also be updated. No action needed.

Compress::Raw::Zlib

The Compress::Raw::Zlib Perl module will be updated to version 2.011. This version brings the module to the most current version. More information about version 2.011 can be found here:

http://search.cpan.org/src/PMQS/Compress-Raw-Zlib-2.011/Changes

No action needed.

PCRE Library

The PCRE regular expression library will be updated to version 7.7. This version brings the library to the most current FreeBSD version. More information about version 7.7 can be found here:

http://www.freshports.org/commit.php?category=devel&port=pcre& ...

No action needed.

IO::Compress::Base

The IO::Compress::Base Perl module class will be updated to version 2.011. This version brings the class to the most current version and addresses issues with zipped files. More information about version 2.011 can be found here:

http://search.cpan.org/src/PMQS/IO-Compress-Base-2.011/Changes

No action needed.

lftp

The lftp file transfer program will be updated to version 3.7.1. This version updates the utility. More information about version 3.7.1 can be found here:

http://www.freshports.org/commit.php?category=ftp&port=lftp& ...

No action needed.

IO::Compress::Zlib

The IO::Compress::Zlib Perl module will be updated to version 2.011. This version brings the module to the most current version and addresses issues with mixed compression zip files. More information about version 2.011 can be found here:

http://search.cpan.org/src/PMQS/IO-Compress-Zlib-2.011/Changes

No action needed.

Xterm

The xterm terminal emulator will be updated to version 235. This version brings the emulator to the most current version and addresses issues with control sequences, escape sequences, special checks, and several other issues. More information about version 235 can be found here:

http://invisible-island.net/xterm/xterm.log.html#xterm_235

No action needed.

ImageMagick

The ImageMagick image processing tools library will be updated to version 6.4.1.3. This version updates the library. More information about version 6.4.1.3 can be found here:

http://www.freshports.org/commit.php?category=graphics&port=ImageMagick& ...

No action needed.

Gawk

The Gawk (GNU awk) search utility will be updated to version 3.1.6. This version updates the utility. More information about version 3.1.6 can be found here:

http://www.freshports.org/commit.php?category=lang&port=gawk& ...

No action needed.

Compress::Zlib

The Compress::Zlib Perl module will be updated to version 2.011. This version brings the module to the most current version. More information about version 2.011 can be found here:

http://search.cpan.org/src/PMQS/Compress-Zlib-2.011/Changes

No action needed.

GNU Emacs

The GNU Emacs real-time display editor and its associated libraries for multilingual characters will be updated to version 22.1_5. This version updates the utility. More information about version 22.1_5 can be found here:

http://www.freshports.org/commit.php?category=editors&port=emacs& ...

No action needed.

Signature Hosting

All updates listed for this platform are classified as “No Action Needed.”

Webmail

• Updated code so that Autoreplies will include the entire subject header when the message contained multiple lines.
• Updated GUI so that the folder size column no longer appears in the Webmail--Folders tab.
• Updated GUI so that customers no longer see a blank message when they convert the compose format from HTML to Plain Text.

ShopSite USPS Plug-In

Updated code so that customers could use a USPS plug-in with their ShopSite account.

Web Alias Page

Updated code so that a new window is opened when a user clicks the Web Alias link.

File Errors

Updated code so that the 413 File too large error and the 403 and 404 error pages are easier to understand

User Statistics Profile

Updated code so that, when checking a user’s statistics, the stats figures will open in a new window.

Help Updates

Updated the following help topics:

• utilities/managing_digital_certificates.xml
• mail/composing_a_message.xml
• composing_a_message_from_the_address_book.xml
• mail/creating_your_personal_signature.xml
• replying_to_the_sender_or_all_recipients.xml
• mail/setting_the_outgoing_mail_options.xml

CHANGELOG

Updated CHANGELOG to 4.12

Note: This notification could include technical inaccuracies or typographical errors. Changes can be made to the information herein; these changes will be distributed in new notifications. AlpineWeb might make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time.