XILO News and Status » Software Updates http://blog.xilo.net http://www.xilo.net/ Wed, 25 Jun 2008 21:29:25 +0000 http://wordpress.org/?v=2.3.1 en Horde Vulnerability http://blog.xilo.net/2008/03/07/horde-vulnerability/software-updates-cat http://blog.xilo.net/2008/03/07/horde-vulnerability/software-updates-cat#comments Fri, 07 Mar 2008 05:05:48 +0000 XILO http://blog.xilo.net/2008/03/07/horde-vulnerability/software-updates-cat An arbitrary file inclusion vulnerability has been discovered in the Horde webmail application. At present, we can confirm that this security vulnerability in question affects Horde 3.1.6 and earlier. Based on incomplete information at this time, we also believe this affects Horde Groupware 1.0.4 and earlier as well (cPanel does not use Horde Groupware at this time).

cPanel customers should update their cPanel and WHM servers immediately to prevent any chance of compromise. The patch will be available in builds 11.18.2 and greater (or 11.19.2 and greater for EDGE systems). The updated builds will be available immediately to all fast update servers. The builds will be available to all other update servers within one hour of this posting.

To check which version of cPanel and WHM is on your server, simply log into WebHost Manager (WHM) and look in the top right corner, or execute the following command from the command line as root:

/usr/local/cpanel/cpanel -V

You can upgrade your server by navigating to  ‘cPanel’ -> ‘Upgrade to Latest Version’ in WebHost Manager or by executing the following from the command line as root:

/scripts/upcp

It is recommended that all use of Horde 3.1.6 and earlier be stopped (on cPanel and non-cPanel systems alike) until Horde updates can be applied.

You can disable Horde on your cPanel system by unchecking the box next to ‘Server Configuration’ -> ‘Tweak Settings’ -> ‘Mail’ -> ‘Horde Webmail’ within WHM, and saving the page with the new settings.

]]> http://blog.xilo.net/2008/03/07/horde-vulnerability/software-updates-cat/feed phpBB3 Released http://blog.xilo.net/2007/12/14/phpbb3-released/software-updates-cat http://blog.xilo.net/2007/12/14/phpbb3-released/software-updates-cat#comments Fri, 14 Dec 2007 08:53:00 +0000 XILO http://blog.xilo.net/2007/12/14/phpbb3-released/ The phpBB group have announced the gold release of phpBB3, the first new major version release in 5 years.

This release represents a huge step for the phpBB project with its features once again able to rival those of competing proprietary bulletin board systems. If you are currently using the stable legacy version of phpBB (2.0.22) then upgrading is easy and is sure to bring you many useful new features.

All those running the latest phpBB3 RC are encouraged to upgrade to the gold release as soon as possible due to some major bug fixes that are present in the final release. Details on some of these fixes are provided on the forum posts linked to above.

If you need any help upgrading, help will be available in the XILO forums.

]]> http://blog.xilo.net/2007/12/14/phpbb3-released/software-updates-cat/feed