Category : News

SUMMARY
cPanel, Inc. has released EasyApache 3.28.1 with PHP versions 5.4.36 and 5.5.20. This release addresses vulnerabilities related to CVE-2014-8142 by fixing a bug in the Core module. We strongly encourage all PHP 5.4 users to upgrade to version 5.4.36 and all PHP 5.5 users to upgrade to version 5.5.20.

AFFECTED VERSIONS
All versions of PHP 5.4 through version 5.4.35 All versions of PHP 5.5 through version 5.5.19.

SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:

CVE-2014-8142 – MEDIUM

PHP 5.4.36
Fixed bug in the Core module related to CVE-2014-8142

PHP 5.5.20
Fixed bug in the Core module related to CVE-2014-8142

SOLUTION
cPanel, Inc. has released EasyApache 3.28.1 with an updated version of PHP 5.4.36 and PHP 5.5.20. Unless you have disabled EasyApache updates, EasyApache updates automatically. Run EasyApache to rebuild your profile with the latest version of PHP.

REFERENCES
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8142
http://php.net/ChangeLog-5.php

The cPanel & WHM Dashboard Will Be Getting a Little Lighter.

Greetings cPanel & WHM user,

We’re always working to create a better experience for our users and sometimes that means removing a great feature to streamline the cPanel dashboard.

Logaholic will no longer be included in future versions of the cPanel & WHM dashboard. In its place, users can opt-in to download their stronger, more robust third-party plugin. Information on installing this plugin, which includes a wide array of new tools, is available on their company blog, using the link below.

We will continue to offer full access and support for Logaholic until cPanel & WHM 11.46 reaches End of Life in October 2015. To continue using Logaholic after this point, all you have to do is install the Logaholic third-party app.

Navigate to the Logaholic blog below to find out how to install this powerful new plugin:
http://www.logaholic.com/logaholic-cpanel-migration/

cPanel & WHM 11.42 is set to reach End of Life at the end of January 2015.

In accordance with our EOL policy [http://go.cpanel.net/longtermsupport], 11.42 will continue functioning on servers. However, no further updates, such as security fixes and installations, will be provided for 11.42 after it reaches EOL.

We recommend that all customers migrate any existing installations of cPanel & WHM 11.42 to a newer version (either 11.44 or 11.46).

If your server setup complicates the process of migrating to a newer version of cPanel & WHM (an upgrade blocker list is available at http://go.cpanel.net/blockers), then cPanel is here to help. Simply open a support ticket at https://tickets.cpanel.net/submit so that our knowledgeable support team can provide recommendations, migration assistance, and more.

About cPanel, Inc.
Since 1997, cPanel, Inc. has been a leading innovator and developer of control panel software for the web hosting industry. cPanel builds software that allows web host professionals to transform standalone servers into fully automated, point-and-click web hosting platforms. cPanel-licensed software allows server and website owners, along with resellers and developers, to optimize their technical resources and replace tedious shell-oriented tasks with dynamic, intuitive web-based interfaces. For more information, visit http://cpanel.net.

cPanel, Inc. is thrilled to release cPanel & WHM software version 11.46, which is now available in the STABLE tier.

cPanel & WHM 11.46 offers localization and support for 29 languages, Paper Lantern branding, ModSecurity tools, and more.

Localization & Support for 29 Languages
As part of version 11.46, cPanel & WHM makes it possible to fully translate the user interface and increases the number and quality of languages provided. With the ability to localize and choose from 29 updated languages, cPanel & WHM offers unprecedented access on an international scale.

Paper Lantern Branding
cPanel & WHM 11.46 includes several options for customizing and branding the Paper Lantern theme.

ModSecurity Tools
New management tools, available in cPanel & WHM 11.46, simplify use of the ModSecurity application firewall.

Detailed information on all cPanel & WHM 11.46 features can be found at cPanel Documentation. An overview of the latest features and benefits is also available at cPanel Releases.

For many cPanel & WHM customers, an existing installation of Microsoft® FrontPage® extensions on their Linux server(s) is blocking the ability to upgrade to cPanel & WHM software version 11.46. Microsoft® discontinued support for FrontPage® extensions on Linux servers in 2006.

Blockers are conditions that will not allow the cPanel & WHM update process (upcp) to install a particular version. For more information on upgrade blockers, visit Upgrade Blockers.

Please note that the FrontPage® RPM and the FrontPage® opt mod (mod_frontpage) in EasyApache are separate entities. The presence of mod_frontpage will not block upgrades to cPanel & WHM version 11.46.

IMPACT
If you do not remove existing installations of Microsoft® FrontPage® extensions on your Linux server(s), you will be unable to upgrade to cPanel & WHM 11.46.

AFFECTED VERSIONS
• cPanel & WHM 11.46
SOLUTION
If you are having trouble upgrading to 11.46, please take the following steps to remove Microsoft® FrontPage® RPM from your Linux server(s).

INSTRUCTIONS
In WHM:
1. Navigate to Home >> FrontPage >> Uninstall FrontPage Extensions.
2. Select the account for which you would like to uninstall the extensions.
3. Click UnInstall.
Or

From the command line:
• Run /scripts/unsetupfp4 –all as the root user.
We strongly recommend that you rebuild EasyApache without FrontPage® before you attempt to upgrade.

For more information on the Microsoft® FrontPage® blocker for cPanel & WHM 11.46 and how to determine if your server is affected, visit 11.46 FrontPage® Update Blocker.

Need help? Simply open a support ticket at cPanel Customer Portal so that our knowledgeable support team can provide recommendations, migration assistance, and more.

SUMMARY
cPanel, Inc. has released EasyApache 3.26.10 with PHP version 5.5.19 and PHP version 5.4.35. This release addresses vulnerabilities related to CVE-2014-3710 by fixing bugs in the Fileinfo module. We strongly encourage all PHP 5.5 users to upgrade to version 5.5.19 and all PHP v5.4 users to upgrade to version 5.4.35.

AFFECTED VERSIONS
All versions of PHP 5.4 through version 5.4.34.
All versions of PHP 5.5 through version 5.5.18.

SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:

CVE-2014-3710 – MEDIUM

PHP 5.4.35
Fixed bug in the Fileinfo module related to CVE-2014-3710

PHP 5.5.19
Fixed bug in the Fileinfo module related to CVE-2014-3710

SOLUTION
cPanel, Inc. has released EasyApache 3.26.10 with updated versions of PHP 5.5.19 and PHP 5.4.35. Unless you have disabled EasyApache updates, EasyApache updates automatically. Run EasyApache to rebuild your profile with the latest version of PHP.

REFERENCES
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3710
http://php.net/ChangeLog-5.php

11.46 Now in RELEASE Tier

cPanel, Inc. is thrilled to release cPanel & WHM software version 11.46, which is now available in the RELEASE tier.

cPanel & WHM 11.46 offers localization and support for 29 languages, Paper Lantern branding, ModSecurity tools, and more.

Localization & Support for 29 Languages
As part of version 11.46, cPanel & WHM makes it possible to fully translate the user interface and increases the number and quality of languages provided. With the ability to localize and choose from 29 updated languages, cPanel & WHM offers unprecedented access on an international scale.

Paper Lantern Branding
cPanel & WHM 11.46 includes several options for customizing and branding the Paper Lantern theme.

ModSecurity Tools
New management tools, available in cPanel & WHM 11.46, simplify use of the ModSecurity application firewall.

Detailed information on all cPanel & WHM 11.46 features can be found at cPanel Documentation. An overview of the latest features and benefits is also available at cPanel Releases.

Notice: 11.40 Now EOL, 11.42 to EOL in 3 Months

cPanel & WHM software version 11.40 has now reached End of Life.

In accordance with our EOL policy [http://go.cpanel.net/longtermsupport], 11.40 will continue functioning on servers. The last release of cPanel & WHM 11.40, 11.40.1.22, will remain on our mirrors indefinitely. However, no further updates, such as security fixes and installations, will be provided for 11.40. Older releases of cPanel & WHM 11.40 will be removed from our mirrors.

cPanel & WHM 11.42 is set to reach End of Life at the end of January 2015.

We recommend that all customers migrate any existing installations of cPanel & WHM 11.42 to a newer version (either 11.44 or 11.46).

If your server setup complicates the process of migrating to a newer version of cPanel & WHM (an upgrade blocker list is available at http://go.cpanel.net/blockers), then cPanel is here to help. Simply open a support ticket at https://tickets.cpanel.net/submit so that our knowledgeable support team can provide recommendations, migration assistance, and more.

About cPanel, Inc.
Since 1997, cPanel, Inc. has been a leading innovator and developer of control panel software for the web hosting industry. cPanel builds software that allows web host professionals to transform standalone servers into fully automated, point-and-click web hosting platforms. cPanel-licensed software allows server and website owners, along with resellers and developers, to optimize their technical resources and replace tedious shell-oriented tasks with dynamic, intuitive web-based interfaces. For more information, visit http://cpanel.net.

SUMMARY
cPanel, Inc. has released EasyApache 3.26.9 with PHP versions 5.4.34 and 5.5.18 and libxml2 version 2.9.2. This release addresses vulnerabilities related to CVE-2014-3669, CVE-2014-3670, CVE-2014-3668, CVE-2014-3660, and CVE-2014-0191 by fixing bugs in the Core, Exif, and XMLRPC modules and in libxml2. We strongly encourage all PHP 5.4 users to upgrade to PHP version 5.4.34 and all PHP 5.5 users to upgrade to version 5.5.18.

AFFECTED VERSIONS
All versions of PHP 5.4 through version 5.4.33 and PHP 5.5 through version 5.5.17.
All versions of libxml2 before EasyApache version 3.26.9.

SECURITY RATING
The National Vulnerability Database (NIST) has given the following severity ratings to these CVEs:

CVE-2014-3669 – MEDIUM

PHP 5.4.34
Fixed bug in the Core module related to CVE-2014-3669

PHP 5.5.18
Fixed bug in the Code module related to CVE-2014-3669

CVE-2014-3670 – MEDIUM

PHP 5.4.34
Fixed bug in Exif module related to CVE-2014-3670

PHP 5.5.18
Fixed bug in Exif module related to CVE-2014-3670

CVE-2014-3668 – MEDIUM

PHP 5.4.34
Fixed bug in XMLRPC related to CVE-2014-3668

PHP 5.5.18
Fixed bug in XMLRPC related to CVE-2014-3668

CVE-2014-3660 – MEDIUM

libxml2
Fixed bug related to CVE-2014-3660

CVE-2014-0191 – MEDIUM

libxml2
Fixed bug in the libxml2 library related to CVE-2014-0191.

SOLUTION
cPanel, Inc. has released EasyApache 3.26.9 with updated versions of PHP 5.4.34, PHP 5.5.18 and libxml2 2.9.2 to correct these issues. Unless you have disabled EasyApache updates, EasyApache updates automatically. Run EasyApache to rebuild your profile with the latest version of PHP and libxml2.

REFERENCES
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3669
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3670
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3668
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3660
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0191
http://php.net/ChangeLog-5.php
http://xmlsoft.org/news.html

11.46 Now in CURRENT Tier

10/22/2014
Houston, TX –

cPanel, Inc. is thrilled to release cPanel & WHM software version 11.46, which is now available in the CURRENT tier.

cPanel & WHM 11.46 offers localization and support for 29 languages, Paper Lantern branding, ModSecurity tools, and more.

Localization & Support for 29 Languages
As part of version 11.46, cPanel & WHM makes it possible to fully translate the user interface and increases the number and quality of languages provided. With the ability to localize and choose from 29 updated languages, cPanel & WHM offers unprecedented access on an international scale.

Paper Lantern Branding
cPanel & WHM 11.46 includes several options for customizing and branding the Paper Lantern theme.

ModSecurity Tools
New management tools, available in cPanel & WHM 11.46, simplify use of the ModSecurity application firewall.

Detailed information on all cPanel & WHM 11.46 features can be found at cPanel Documentation. An overview of the latest features and benefits is also available at cPanel Releases.