cPanel

New cmm v1.21

Changes:
– Added support for cPanel v11.38.1+ AppConfig addon registration
– Switched to using /etc/userdomains from /etc/localdomains + /etc/remotedomains to give more accurate domain/account listings

NOTE: In accordance with the new conventions for v11.38.1+ AppConfig the url to the cmm WHM plugin will change from /cgi/addon_cmm.cgi to /cgi/configserver/cmm.cgi. This will only happen with cmm v1.21+ and cPanel v11.38.1+. Older version of cmm will continue to use the old URL. This has no particular relevance to users accessing through WHM, but will affect direct URL access by users or third party applications

New cmc v1.05

Changes:
– Added support for cPanel v11.38.1+ AppConfig addon registration

NOTE: In accordance with the new conventions for v11.38.1+ AppConfig
the url to the cmc WHM plugin will change from /cgi/addon_cmc.cgi to
/cgi/configserver/cmc.cgi. This will only happen with cmc v1.05+ and
cPanel v11.38.1+. Older version of cmc will continue to use the old
URL. This has no particular relevance to users accessing through WHM,
but will affect direct URL access by users or third party
applications

New MailScanner Front-End v4.41 (SECURITY FIX)

ALL USERS SHOULD UPGRADE TO THIS LATEST VERSION IMMEDIATELY

Changes:
– SECURITY FIX – Prevent unauthorised access to Mailwatch scripts
– Fixed some more Deprecation issues for PHP in cPanel v11.36+ in mailwatch

New cxs v2.96

Changes:
– Fixed –xtra [file] detection for regfile: and file: entries
– Exploit regex definitions database additions
– Exploit fingerprint definitions database additions

New csf v6.12

Changes:
– Added iptables UID logging for dropped outgoing packets
– New feature – DROP_OUT_LOGGING. Enables iptables logging of dropped outgoing connections. Where available, these logs will also include the UID connecting out which can help track abuse. Note: Only outgoing SYN packets for TCP connections are logged. The option is not enabled by default, but we recommend that it is enabled
– Option DROP_ONLYRES now only applies to incoming port connections
– New feature – User ID Tracking. This feature tracks UID blocks logged by iptables to syslog. If a UID generates a port block that is logged more than UID_LIMIT times within UID_INTERVAL seconds, an alert will be sent. Requires DROP_OUT_LOGGING to be enabled
– Modified Port Scan Tracking regexes to ensure only incoming connections are tracked
– Added Server Check for dhclient running
– Added Server Check on cPanel servers for antirelayd
– Added Server Check on for a swap file (don't bother on Virtuozo)
– Added Server Check for xinetd, qpidd, portreserve and rpcbind in Services Check since most people won't use them

New csf v6.09

Changes:
– Modified csf UI to detect Webmin install and symlink script and images directory so as to no longer require Webmin module update on a new csf version
– Tidied up csf UI html
– Fixed System Statistics graph display when using Webmin
– Modified Server Security check to only perform GENERIC test when using Webmin to prevent hanging processes
– Added CLI options –car, –carm. This removes an allowed IP in a Cluster and removes it from /etc/csf.allow
– Added new options LF_WEBMIN, LF_WEBMIN_PERM. This feature adds login failure detection for Webmin in WEBMIN_LOG
– Added new option LF_WEBMIN_EMAIL_ALERT. This feature sends an email if a successful login to Webmin is detected in WEBMIN_LOG
– Modified LF_SCRIPT_ALERT text in csf.conf for cPanel servers
– Modified proftpd regex to cope with non-standard format and to remove trailing colons from account name
– Modified LF_SCRIPT_ALERT regex to cater for paths containing spaces
– Improvements to LF_SCRIPT_ALERT memory usage and possible script detection
– Added alternative LF_SCRIPT_ALERT regex for specific 1H.com exim logging ACL

New cxs v2.94

Changes:
– Removed a false-postitive fingerprint definition

New cxs v2.93

Changes:
– New features: –prenice [num], –pionice [num]. These options allow you to control the nice and ionice priorities of the running process. This can, for example, help even out the load on heavy IO servers or increase the speed of the scan on busy servers
– Exploit fingerprint definitions database additions

New cxs v2.92

Changes:
– Improvements to the main decoder regex
– Improvements to error reporting on UI restore
– Fixed typo in documentation regarding cxs.xtra :quarantine feature
– Added IP, where available, to –script [script] parameters passed to external script
– Exploit fingerprint definitions database additions