News/Changes 2008

Information

Introduction
Specifications
MODUS technology
Domain registration
Prices
Billing
B2B reseller options
Consulting
Contact
About us
Imprint · Impressum
Business terms · AGB
Press room
Customer gallery
Glossary
Search

Action

Test-drive a box!
Order
· First box
· Additional box
· Domain registration
· Domain transfer
· Subdomain
· SSL certificate
· Cust. gallery entry
· Something else
Update CC info
Send auth'ed message
Get help
Talk back to us

Box Docs

Introduction
First steps
User accounts
Email/News service
Web service
Other software
Server protection
News/Changes
· Recent
· Archive

Recent Changes

·	Security upgrade to libxml2 2.6.32 + patches
·	Security upgrade to SquirrelMail 1.4.16
·	Maintenance upgrade to Wget 1.11.2
·	Security patches for PHP 5.2.6
·	Maintenance upgrade to PHP 4.4.9
·	Security patches for Python 2.4.5 & 2.5.2
·	Maintenance upgrade to Python 2.3.7
·	Maintenance upgrade to Bash 3.2.39
·	Maintenance upgrade to Ruby 1.8.6p287
·	Maintenance upgrade to cURL 7.18.0

Statistics

Active boxes	522
Net I/O (30d)	362	GB
Disk space	274	GB

Latest Awards

Security upgrade to libxml2 2.6.32 + patches

2008-10-28

Two vulnerabilities have been found in libxml2, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise an application using the library. Successful exploitation may allow execution of arbitrary code. We fixed the problem by upgrading to revision 2.6.32 plus the recommended patches.

For more information please refer to

  http://secunia.com/advisories/31558

Security upgrade to SquirrelMail 1.4.16

2008-10-21

An issue was found in SquirrelMail that allowed the cookies of a session started over SSL (https) to be transmitted over HTTP as well. This affects installations that offer SquirrelMail both over HTTP and HTTPS. This is known as setting the "secure" flag of the cookie. We fixed the problem by upgrading to revision 1.4.16.

For more information please refer to

  http://www.squirrelmail.org/security/issue/2008-09-28

Maintenance upgrade to Wget 1.11.2

2008-09-19

This is a maintenance release which introduces a number of bug fixes and improvements.

Security patches for PHP 5.2.6

2008-09-18

Multiple directory traversal vulnerabilities in PHP allow remote attackers to bypass safe_mode restrictions. We fixed the problem by applying the recommended patches.

For more information please refer to

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2665
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2666

Maintenance upgrade to PHP 4.4.9

2008-09-18

This is a pure bug fix release. There are no new features.

Security patches for Python 2.4.5 & 2.5.2

2008-09-17

Multiple security vulnerabilities have been found in Python. We fixed the problem by applying the recommended patches and also rebuilt the respective mod_python modules.

For more information please refer to

  http://secunia.com/advisories/31305

Maintenance upgrade to Python 2.3.7

2008-09-17

This is a pure bug fix release. There are no new features. We also upgraded the respective mod_python module.

Maintenance upgrade to Bash 3.2.39

2008-09-16

This is a pure bug fix release. There are no new features.

Maintenance upgrade to Ruby 1.8.6p287

2008-09-16

This is a maintenance release which introduces numerous bug fixes and improvements.

Maintenance upgrade to cURL 7.18.0

2008-07-02

This is a maintenance release which introduces a number of bug fixes, improvements and new features.

Security patch for Fetchmail

2008-07-01

Fetchmail can crash on some messages in conjunction with the "-v -v" debug option. We fixed the problem by applying the recommended patch.

For more information please refer to

  http://fetchmail.berlios.de/fetchmail-SA-2008-01.txt

Maintenance upgrade to Multitail 5.2.2

2008-06-30

This is a pure bug fix release. There are no new features.

Security upgrade to PHP 5.2.6

2008-05-06

Multiple security vulnerabilities have been found in PHP. We addressed the problem by upgrading to revision 5.2.6, which fixes more than 120 bugs altogether.

For more information please refer to

  http://www.php.net/releases/5_2_6.php

Security upgrade to png 1.2.27

2008-04-30

Libpng allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory. We fixed the problems by upgrading to revision 1.2.27.

For more information please refer to

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1382

Maintenance upgrade to Wget 1.11

2008-04-30

This is a maintenance release which introduces a number of bug fixes and improvements.

Maintenance upgrade to Sudo 1.6.9p15

2008-04-29

This is a maintenance release which introduces numerous bug fixes and improvements.

For more information please refer to

  http://www.courtesan.com/sudo/stable.html

Maintenance upgrades to Python 2.3.6, 2.4.5 & 2.5.2

2008-04-25

These are pure bug fix releases. There are no new features. We also upgraded the respective mod_python modules.

Maintenance upgrade to Rsync 3.0.2

2008-04-18

This major revision upgrade introduces lots of bug fixes, improvements and new features.

For more information please refer to

  http://rsync.samba.org/ftp/rsync/src/rsync-3.0.0-NEWS
  http://rsync.samba.org/ftp/rsync/src/rsync-3.0.1-NEWS
  http://rsync.samba.org/ftp/rsync/src/rsync-3.0.2-NEWS

Maintenance upgrade to Subversion 1.4.6

2008-04-08

This is a maintenance release which introduces a number of bug fixes and improvements.

Maintenance upgrade to GnuPG 1.4.8

2008-04-08

This maintenance release introduces a number of bug fixes, improvements and new features.

Maintenance upgrade to mod_jk 1.2.26

2008-04-08

This is a maintenance release which introduces a number of bug fixes and improvements.

Security patches for Unzip

2008-04-07

Three security vulnerabilities have been found in Unzip. We fixed the problem by applying the recommended patches.

For more information please refer to

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0888
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4667
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2475

Maintenance upgrade to JDK 1.5.0_14

2008-04-07

This maintenance release, based on version 1.5.0_14 of Sun's original JRL source code and a matching new level (p8) of the BSD specific portability patches, introduces lots of bug fixes and a number of improvements.

Maintenance upgrade to Exim 4.69

2008-02-08

This maintenance release introduces a number of bug fixes, improvements and new features.

Maintenance upgrade to Bash 3.2.33

2008-02-07

This is a pure bug fix release. There are no new features.

Maintenance upgrade to mod_fastcgi 2.4.6

2008-02-07

This is a maintenance release which introduces a number of bug fixes and improvements.

Security upgrade to Apache 1.3.41

2008-01-25

Three security vulnerabilities have been found in Apache, in 'mod_status', 'mod_imap' and 'mod_proxy'. We fixed the problems by upgrading to revision 1.3.41.

For more information please refer to

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6388
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5000
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3847

Security upgrade to PHP 4.4.8

2008-01-17

Multiple security vulnerabilities have been found in PHP. We addressed the problem by upgrading to revision 4.4.8.

For more information please refer to

  http://www.php.net/releases/4_4_8.php

Security upgrade to PostgreSQL 7.3.21

2008-01-16

A number of security vulnerabilities have been found in PostgreSQL. We fixed the problem by upgrading to revision 7.3.21.

For more information please refer to

  http://www.postgresql.org/about/news.905

News/Changes archive

For the respective set of archived articles, please select a year: