Cpanel Service Emails - Revision history

Cwadmin at 12:37, 13 October 2010

Cwadmin — Wed, 13 Oct 2010 12:37:42 GMT

←Older revision		Revision as of 12:37, 13 October 2010
Line 10:		Line 10:
	Please pass this very important announcement to Operations or your Technical Support team.		Please pass this very important announcement to Operations or your Technical Support team.

-	A Linux Kernel Exploit has been released that directly impacts all 64-bit kernels. It is highly recommended you review the links below to gather more information on this exploit.	+	A Linux Kernel Exploit has been released that directly impacts all 64-bit kernels. It is
		+	highly recommended you review the links below to gather more information on this exploit.

	http://forums.cpanel.net/f185/x86_64-kernel-exploit-165758.html#post692222		http://forums.cpanel.net/f185/x86_64-kernel-exploit-165758.html#post692222
Line 16:		Line 17:
	http://linux.slashdot.org/article.pl?sid=10/09/20/0217204		http://linux.slashdot.org/article.pl?sid=10/09/20/0217204

-	cPanel is providing this as information only. The scope of support that is provided with cPanel/WHM does not include security related operating system support. Please seek the advice of an expert if you are unsure or have further questions about the workaround or exploit.	+	cPanel is providing this as information only. The scope of support that is provided with
		+	cPanel/WHM does not include security related operating system support. Please seek the
		+	advice of an expert if you are unsure or have further questions about the workaround or exploit.

Cwadmin at 13:22, 20 September 2010

Cwadmin — Mon, 20 Sep 2010 13:22:25 GMT

←Older revision		Revision as of 13:22, 20 September 2010
Line 1:		Line 1:
		+	== September 20, 2010 ==
		+	<pre>
		+	NOC:
		+
		+	You are receiving this communication because you are listed as the
		+	Technical Contact contact for Cyber Wurx, LLC.
		+
		+	Greetings,
		+
		+	Please pass this very important announcement to Operations or your Technical Support team.
		+
		+	A Linux Kernel Exploit has been released that directly impacts all 64-bit kernels. It is highly recommended you review the links below to gather more information on this exploit.
		+
		+	http://forums.cpanel.net/f185/x86_64-kernel-exploit-165758.html#post692222
		+	https://www.ksplice.com/uptrack/cve-2010-3081.ssi.xhtml
		+	http://linux.slashdot.org/article.pl?sid=10/09/20/0217204
		+
		+	cPanel is providing this as information only. The scope of support that is provided with cPanel/WHM does not include security related operating system support. Please seek the advice of an expert if you are unsure or have further questions about the workaround or exploit.
		+
		+
		+
		+
		+
		+	---------------------
		+	</pre>
	== January 13, 2010 ==		== January 13, 2010 ==
	<pre>		<pre>

Cwadmin at 16:30, 13 January 2010

Cwadmin — Wed, 13 Jan 2010 16:30:27 GMT

←Older revision		Revision as of 16:30, 13 January 2010
Line 566:		Line 566:
	cPanel		cPanel
	mattc@cpanel.net		mattc@cpanel.net
-	</pre>
-
-	== Oct 25, 2007 ==
-	<pre>
-	From billing@cpanel.net
-	Subject [cPanel] Updating to builds later then 16800 recommend.
-	Body NOC:
-
-	You are receiving this communication because you are listed as the
-	tech contact for Cyber Wurx, LLC.
-
-	We are currently tracking a potential denial of service issue with builds older then 16800 (early September). At this time, we recommend customers that are still running these older builds update to any of the currently released versions.
-
-	The latest builds are:
-
-	11.11.0-STABLE_16999
-	11.15.0-RELEASE_17665
-	11.15.0-CURRENT_17700
-	11.15.0-EDGE_17700
-
-	More information will be provided if and when it becomes available. Please note that this may be an unrelated issue, and that this notice only serves as an early warning.
-
-	-cPanel Support Team
-
-
-
-
-
-	---------------------
	</pre>		</pre>

Cwadmin: /* Oct 25, 2007 */

Cwadmin — Wed, 13 Jan 2010 16:29:17 GMT

Oct 25, 2007

←Older revision		Revision as of 16:29, 13 January 2010
Line 390:		Line 390:
	11.15.0-EDGE_17700		11.15.0-EDGE_17700

-	More information will be provided if and when it becomes available. Please note that this may be an unrelated	+	More information will be provided if and when it becomes available. Please note that this may be an unrelated
	issue, and that this notice only serves as an early warning.		issue, and that this notice only serves as an early warning.

Cwadmin: /* Oct 25, 2007 */

Cwadmin — Wed, 13 Jan 2010 16:28:48 GMT

Oct 25, 2007

←Older revision		Revision as of 16:28, 13 January 2010
Line 370:		Line 370:
	</pre>		</pre>

-	==Sept 4, 2007==	+	== Oct 25, 2007 ==
	<pre>		<pre>
	From billing@cpanel.net		From billing@cpanel.net
-	Subject cPanel Advisory: IO::Compress and DNS Zones missing	+	Subject [cPanel] Updating to builds later then 16800 recommend.
	Body NOC:		Body NOC:

Line 379:		Line 379:
	tech contact for Cyber Wurx, LLC.		tech contact for Cyber Wurx, LLC.

-	Dear cPanel Partner,	+	We are currently tracking a potential denial of service issue with builds older then 16800 (early September).
		+	At this time, we recommend customers that are still running these older builds update to any of the currently
		+	released versions.

-	The CPAN module IO::Compress::Zlib version 2.006 has caused several issues for	+	The latest builds are:
-	some. The problems arise due to a dependency upon IO::Compress::Base not	+
-	being correctly installed. This is due to some mirrors not being updated with	+
-	the proper dependency information. Since the dependencies are incorrect, the	+
-	module no longer functions properly. The most noticeable problem from this is	+
-	the complete breakage of DNSAdmin, however other issues are caused. To	+
-	alleviate the problems, cPanel is providing a hotfix which can be applied in	+
-	the following manner:	+

-	From the command line:	+	11.11.0-STABLE_16999
		+	11.15.0-RELEASE_17665
		+	11.15.0-CURRENT_17700
		+	11.15.0-EDGE_17700

-	1. SSH into your server as root.	+	More information will be provided if and when it becomes available. Please note that this may be an unrelated
-	2. At the command line, execute the following:	+	issue, and that this notice only serves as an early warning.
-	/scripts/autorepair io_compress_gzip	+

-	Or from WHM:	+	-cPanel Support Team

-	1. Log into WHM as root
-	2. Enter the following URL into your browser's address bar:
-	https://__YOURSERVERHERE__:2087/autofixer
-	(example: https://www.example.com:2087/autofixer)
-	3. When prompted, enter: io_compress_gzip

-	The autofixer will report it is applying "IO::Compress::Zlib autorepair
-	verison 1.1" This process replaces the IO::Compress::Zlib with
-	version 2.005. Also a hold back has been enabled to prevent the perl installer
-	process from installing IO::Compress::Zlib version 2.006 until a new
-	version is available that fixes this problem.

-	For non-cPanel servers that experience this issue, it is also possible to
-	resolve this manually by performing the following steps:

-	1. SSH into your server as root.
-	2. Execute the following commands:
-	wget
-	http://search.cpan.org/CPAN/authors/id/P/PM/PMQS/IO-Compress-Base-2.006.tar.gz
-	tar xfzv IO-Compress-Base-2.006.tar.gz
-	cd IO-Compress-Base-2.006
-	perl Makefile.PL
-	make
-	make install

-	The manual fix will also work for a cPanel server.	+	---------------------
-		+
-	In order to expedite the process, we have also updated all published builds to include the fix.	+
-		+
-	If you incur any difficulties during the update process or have any questions	+
-	or concerns you wish us to address, please contact our support team by	+
-	opening a support ticket though the manage interface.	+
-		+
-		+
-	--	+
-	Matthew Carey	+
-	Technical Support Manager	+
-	techmgr@cpanel.net	+
-	+17135290800 x 4041	+
	</pre>		</pre>

Cwadmin: /* May 2, 2008 */

Cwadmin — Wed, 13 Jan 2010 16:28:17 GMT

May 2, 2008

←Older revision		Revision as of 16:28, 13 January 2010
Line 1:		Line 1:
-
	== January 13, 2010 ==		== January 13, 2010 ==
	<pre>		<pre>
Line 240:		Line 239:
	tech contact for Cyber Wurx, LLC.		tech contact for Cyber Wurx, LLC.

-	Several potential security issues have been identified with cPanel software and Horde, a 3rd party bundled application. cPanel releases prior to 11.18.4 and 11.22.2 are susceptible to security issues, which range in severity from trivial to medium-critical. Along with the discovery of these potential issues, cPanel has released a new security tool to provide users with protection from XSRF attacks.	+	Several potential security issues have been identified with cPanel software and Horde, a 3rd party bundled application.
		+	cPanel releases prior to 11.18.4 and 11.22.2 are susceptible to security issues, which range in severity from trivial
		+	to medium-critical. Along with the discovery of these potential issues, cPanel has released a new security tool to
		+	provide users with protection from XSRF attacks.


Line 246:		Line 248:
	Update Advisory		Update Advisory
	==============================		==============================
-	All STABLE and RELEASE users are strongly urged to update to their respective 11.18.5 release. CURRENT and EDGE users should update to the latest 11.22.3 release. No releases are deemed susceptible to severe, critical or root access vulnerabilities.	+	All STABLE and RELEASE users are strongly urged to update to their respective 11.18.5 release. CURRENT and EDGE users
		+	should update to the latest 11.22.3 release. No releases are deemed susceptible to severe, critical or root access
		+	vulnerabilities.


	XSRF Protection		XSRF Protection
	==============================		==============================
-	cPanel has also introduced a tool designed to protect against a category of attacks known as cross-site request forgery (XSRF). This tool will validate the browser referrer information against an approved list of domains.	+	cPanel has also introduced a tool designed to protect against a category of attacks known as cross-site request
		+	forgery (XSRF). This tool will validate the browser referrer information against an approved list of domains.

-	The list of approved domains is automatically determined according to the system's configuration. Any blocked requests are presented to the end user for approval. This additional step will minimize disruption of workflow while protecting the user from an outside XSRF attack. This check will not prevent bookmarked links in modern browsers from working normally.	+	The list of approved domains is automatically determined according to the system's configuration. Any blocked requests
		+	are presented to the end user for approval. This additional step will minimize disruption of workflow while protecting
		+	the user from an outside XSRF attack. This check will not prevent bookmarked links in modern browsers from working normally.

-	XSRF protection is not enabled by default. It is controlled via WHM's Tweak Settings under the Security heading. The protection may also be enabled manually by adding the following line to the end of /var/cpanel/cpanel.config:	+	XSRF protection is not enabled by default. It is controlled via WHM's Tweak Settings under the Security heading. The
		+	protection may also be enabled manually by adding the following line to the end of /var/cpanel/cpanel.config:

	referrersafety=1		referrersafety=1

Cwadmin at 16:27, 13 January 2010

Cwadmin — Wed, 13 Jan 2010 16:27:33 GMT

←Older revision		Revision as of 16:27, 13 January 2010
Line 1:		Line 1:
		+
		+	== January 13, 2010 ==
		+	<pre>
		+	NOC:
		+
		+	You are receiving this communication because you are listed as the
		+	Technical Contact contact for Cyber Wurx, LLC.
		+
		+	Problem:
		+	The release of 11.25.0-RELEASE_42399 and 11.25.0-CURRENT_42399 introduced a configuration issue that may cause
		+	Apache configuration syntax errors on servers with no accounts when the mod_userdir tweak is enabled. The
		+	condition will present itself upon addition of the first account to the server. This issue is quickly addressed
		+	by rebuilding the Apache configuration file.
		+
		+	Symptoms:
		+	The following error can be seen in the cpanel error_log and when attempting to restart Apache:
		+
		+	UserDir "enable" keyword requires a list of usernames
		+
		+	Newly created websites would be sent to defaultwebpage.cgi instead of the appropriate document root.
		+
		+	Resolutions:
		+	1) New builds, 11.25.0-CURRENT_42400 and 11.25.0-RELEASE_42400, have been published to address the issue. This
		+	issue will not be present on subsequent new installations. Upgrading a currently affected system will resolve
		+	this issue.
		+
		+	2) Rebuilding the Apache configuration after the addition of the first account will permanently resolve this
		+	issue.
		+
		+	From the command line:
		+	/scripts/rebuildhttpdconf
		+	/scripts/restartsrv_httpd
		+
		+	or
		+
		+	/scripts/autorepair userdir_enable_fix
		+	/scripts/restartsrv_httpd
		+
		+
		+	From the WHM:
		+	Service Configuration -> Apache Configuration -> Global Configuration ->
		+	Save -> Rebuild Configuration and Restart Apache
		+
		+	Note:
		+	The Apache configuration may be rebuilt as a result of other changes made in the WHM. Your new installation may
		+	not experience this issue as a result the the Apache configuration being rebuilt automatically.
		+
		+
		+
		+	---------------------
		+	</pre>
	==January 5, 2010==		==January 5, 2010==
	<pre>		<pre>

Cwadmin at 14:37, 6 January 2010

Cwadmin — Wed, 06 Jan 2010 14:37:50 GMT

←Older revision		Revision as of 14:37, 6 January 2010
Line 8:		Line 8:
	Greetings:		Greetings:

-	The Quality Assurance team discovered a bug within the SpamAssassin ruleset that will mark messages sent in the year 2010 (that's today) and beyond with a higher spam score than expected. This bug can result in legitimate mail being flagged as spam.	+	The Quality Assurance team discovered a bug within the SpamAssassin ruleset that will mark messages sent in the
		+	year 2010 (that's today) and beyond with a higher spam score than expected. This bug can result in legitimate mail
		+	being flagged as spam.

-	The cPanel Development team has issued a hot fix that will address this issue and will automatically update the SpamAssassin ruleset to resolve this issue. If you have automatic cPanel updates enabled, no further action is required.	+	The cPanel Development team has issued a hot fix that will address this issue and will automatically update the
		+	SpamAssassin ruleset to resolve this issue. If you have automatic cPanel updates enabled, no further action is required.

-	If you do not have automatic cPanel updates enabled, you can manually update the SpamAssassin ruleset by executing the following commands in a root shell:	+	If you do not have automatic cPanel updates enabled, you can manually update the SpamAssassin ruleset by executing
		+	the following commands in a root shell:

	/scripts/autorepair spamd_y2010_fix		/scripts/autorepair spamd_y2010_fix

-	For a more detailed explanation and information on resolving this problem on a non-cPanel environment, please review:	+	For a more detailed explanation and information on resolving this problem on a non-cPanel environment,
		+	please review:

	https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6269		https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6269

-	As always, the entire cPanel team has pulled together to provide a rapid response to this issue as we realize proper email delivery is mission critical.	+	As always, the entire cPanel team has pulled together to provide a rapid response to this issue as we realize
		+	proper email delivery is mission critical.

-	If you need any assistance, our 24x7 Technical Analyst team is standing by to provide you with further instructions, answers, and solutions to this bug. To reach them please submit a ticket via:	+	If you need any assistance, our 24x7 Technical Analyst team is standing by to provide you with further instructions,
		+	answers, and solutions to this bug. To reach them please submit a ticket via:

	https://tickets.cpanel.net/submit/index.cgi?step=2&reqtype=tickets&product=cpanel		https://tickets.cpanel.net/submit/index.cgi?step=2&reqtype=tickets&product=cpanel

-	You can also join the discussion on the SpamAssassin bug at http://forums.cpanel.net/f43/spamassassin-fh_date_past_20xx-0-0-rule-bug-142725.html	+	You can also join the discussion on the SpamAssassin bug at
		+	http://forums.cpanel.net/f43/spamassassin-fh_date_past_20xx-0-0-rule-bug-142725.html

	Happy New Year,		Happy New Year,

Cwadmin at 14:36, 6 January 2010

Cwadmin — Wed, 06 Jan 2010 14:36:19 GMT

←Older revision		Revision as of 14:36, 6 January 2010
Line 1:		Line 1:
		+	==January 5, 2010==
		+	<pre>
		+	NOC:
		+
		+	You are receiving this communication because you are listed as the
		+	Technical Contact contact for Cyber Wurx, LLC.
		+
		+	Greetings:
		+
		+	The Quality Assurance team discovered a bug within the SpamAssassin ruleset that will mark messages sent in the year 2010 (that's today) and beyond with a higher spam score than expected. This bug can result in legitimate mail being flagged as spam.
		+
		+	The cPanel Development team has issued a hot fix that will address this issue and will automatically update the SpamAssassin ruleset to resolve this issue. If you have automatic cPanel updates enabled, no further action is required.
		+
		+	If you do not have automatic cPanel updates enabled, you can manually update the SpamAssassin ruleset by executing the following commands in a root shell:
		+
		+	/scripts/autorepair spamd_y2010_fix
		+
		+	For a more detailed explanation and information on resolving this problem on a non-cPanel environment, please review:
		+
		+	https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6269
		+
		+	As always, the entire cPanel team has pulled together to provide a rapid response to this issue as we realize proper email delivery is mission critical.
		+
		+	If you need any assistance, our 24x7 Technical Analyst team is standing by to provide you with further instructions, answers, and solutions to this bug. To reach them please submit a ticket via:
		+
		+	https://tickets.cpanel.net/submit/index.cgi?step=2&reqtype=tickets&product=cpanel
		+
		+	You can also join the discussion on the SpamAssassin bug at http://forums.cpanel.net/f43/spamassassin-fh_date_past_20xx-0-0-rule-bug-142725.html
		+
		+	Happy New Year,
		+	The cPanel Team
		+
		+
		+
		+
		+	---------------------
		+	</pre>
		+
	==October 24, 2009==		==October 24, 2009==
	<pre>		<pre>

Cwadmin: /* October 24, 2009 */

Cwadmin — Fri, 13 Nov 2009 15:14:05 GMT

October 24, 2009

←Older revision		Revision as of 15:14, 13 November 2009
Line 6:		Line 6:
	Technical Contact contact for Cyber Wurx, LLC.		Technical Contact contact for Cyber Wurx, LLC.

-	Recent versions of Bind distributed by RedHat and CentOS enable strict zone checking at startup time. This setting can potentially cause problems for Bind users with a large number of zone files or syntax errors in individual zone files. In these circumstances, users may experience an inability to restart Bind after a shutdown.	+	Recent versions of Bind distributed by RedHat and CentOS enable strict zone checking at startup time. This setting
		+	can potentially cause problems for Bind users with a large number of zone files or syntax errors in individual zone
		+	files. In these circumstances, users may experience an inability to restart Bind after a shutdown.

-	cPanel has produced and distributed an autofixer for this condition. This repair will run automatically on all systems with updates enabled. However, cPanel checks only occur at specific times and depending upon update schedules, users experiencing issues restarting Bind may benefit from manually executing the code to disable strict zone checking. You may safely execute the autofixer at your discretion by running the following command:	+	cPanel has produced and distributed an autofixer for this condition. This repair will run automatically on all
		+	systems with updates enabled. However, cPanel checks only occur at specific times and depending upon update
		+	schedules, users experiencing issues restarting Bind may benefit from manually executing the code to disable strict
		+	zone checking. You may safely execute the autofixer at your discretion by running the following command:

	/scripts/autorepair bind_disable_checkzone		/scripts/autorepair bind_disable_checkzone
Line 21:		Line 26:
	---------------------		---------------------
	</pre>		</pre>
		+
	==July 26, 2009==		==July 26, 2009==
	<pre>		<pre>