Chirpy

Chirpy

New ClamAV v0.96.2

ClamAV 0.96.2 has been released. This version brings a new PDF parser, performance and memoryimprovements, and a number of bugfixes and minor enhancements.

New cxs v1.31

Changes: Always exit if ftp/cgi user is listed in a specified ignore file Disable pure-uploadscript if /etc/cxs/ftpddisable exists (in addition to /etc/ftpddisable) Exploit regex definitions database additions Exploit fingerprint definitions database additions

New csf v5.09

Changes: Added Server Check report check that klogd is running if using syslogd or that klog module is loaded if running rsyslogd Added Server Check report, checks for apache settings: TraceEnable, ServerSignature, ServerTokens and FileETag on cPanel servers Fixed ip6tables…

New cxs v1.30

Changes: Added new option –script [script] which runs an external script whenever a match is detected against a file. See documentation for more information Exploit regex definitions database additions Exploit fingerprint definitions database additions

New cxs v1.29

Changes: Significant improvements to –decode [file] Increased LWP timeout to cater for servers with slow connections to the license server Added total Viruses and Fingerprint Matches to the –mail Subject Added total Fingerprint Matches to the –summary Exploit regex definitions…

rsyslog v3+ and kernel logging

If you are running the version 3+ of rsyslog then you may not be logging iptables kernel logs.This will prevent investigation of iptables block issues and the csf Port Scan Tracking feature.You need to check and ensure that the…

New csf v5.08

Changes: New option CLUSTER_MASTER which is the IP of the master node in a cluster allowed to send CLUSTER_CONFIG changes. This must be set in order to use CLUSTER_CONFIG options Added new Cluster CLI option –cfile (-cf) for sending a…

New cxs v1.28

Changes: If ftp is disabled in cPanel do not start pure-uploadscript New –options [E]. This option will match scripts that send out email using sendmail, exim or via SMTP. This option requires that –options [m] is also specified Improvement to…

New csf v5.07

Changes: Fixed bug introduced in v5.04 that omitted two outgoing DNS lookup rules that could affect servers where iptables connection tracking isn’t working correctly