cPanel

Changes:

• Modify cPanel install.txt to add the ConfigServer ModSecurity Vendor option
• Added new advanced PHP decoders
• Exploit fingerprint definitions database additions

If you are using ModSecurity v2.9 with Apache you will need to add an extra ModSecurity directive to the cxs upload scanning rule for it to function as ModSecurity have changed the way that the @inspectFile function works:

SecUploadKeepFiles RelevantOnly

On a cPanel server this means that you need to edit:

/usr/local/apache/conf/modsec2.user.conf

and add the line above after the cxs ModSecurity rule and then restart httpd.

Changes:

• Modified documentation to address changes in ModSecurity v2.9 that requires the following is set as part of the ModSecurity config:

  SecUploadKeepFiles RelevantOnly

• Exploit fingerprint definitions database additions

Changes:

• Added new option –[no]ssl. When enabled (the default) all cxs URL functions, such as updating, bayes corpus retrieval and license checking will be done over an SSL connection to ConfigServer servers
• Added /var/run/clamd.scan/clamd.sock as another default clamd socket location for –clamdsock [socket]
• Added unsupported option –YSKIPCGI. See POD for more information
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions