Server Software and Configuration Services
Changes: – Include gzdecode() detection for PHP scripts – Switched from using LWP to HTTP::Tiny to reduce memory footprint and reliance on the LWP perl module. The HTTP::Tiny module is included in the distribution, so no further action is necessary…
Changes: – Switched from using LWP to HTTP::Tiny to reduce memory footprint and reliance on the LWP perl module. The HTTP::Tiny module is included in the distribution, so no further action is necessary – Modified lfd perl module loading to…
Changes: – Modify MESSENGER HTML header to return code 403 instead of 200 – Modify UI daemon to fallback to IPv4 if IPV6 setting is not enabled – Added new options LF_SYMLINK and LF_SYMLINK_PERM. This feature enables detection of repeated…
Changes: – Modify clean.incoming.cron to tidy /var/spool/MailScanner/incoming/SpamAssassin-Temp – Fix bug in virus scanner update wrappers that fail to tidy temp files
Changes: – Improvements to the main decoder regex – Reverted to using temporary files during PHP file decoding due to a major bug in PHP v5.4.* which produces “Ran out of opcode space!” in interactive mode – Exploit regex definitions…
http://blog.clamav.net/2013/03/clamav-0977-has-been-released.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Clamav+%28ClamAV%C2%AE%29
cPanel v11.36 has now entered the RELEASE tree and you will notice that most of your addon perl scripts failing. You can resolve this easily with our addons by reinstalling them. We have provided a simple script that can do…
Changes: – Ensure all binaries are called with their full paths for the scheduled Server Security Check reports – Allow csf -u/-uf/–update and -c/–check when csf is disabled – Make RT_* checks IPv6 compatible – Added dns query caching for…
Changes: – Major new option – FASTSTART: This option uses IPTABLES_SAVE, IPTABLES_RESTORE and IP6TABLES_SAVE, IP6TABLES_RESTORE in two ways: 1. On a clean server reboot the entire csf iptables configuration is saved and then restored, where possible, to provide a near…
As a follow-up to the previous post, it has now been confirmed that there is an SSHD rootkit in the wild that spreads itself if you ssh from an infected server to another. The details are explained in this article…