Security Fixes

The following Security Fixes are for Ensim Pro/Basic for Linux.
These Security Fixes only update specific packages on the server to fix certain vulnerabilities.
Regular maintainance releases for Ensim Pro and Basic for Linux (Fedora) are available at:
Ensim Pro for Linux
Ensim Basic for Linux

Hot Fixes For Ensim Pro/Basic 4.0.3 for Linux
*Unless specified, the hotfixes apply to Ensim Pro on RHEL, Fedora Core 1 and Fedora Core 2

Date
Synopsis
Installation Details
02/06/06
HTTP POST can be issued against files in the protected directory
 Knowledge Base 2185
10/11/05
Errors while Deleting MX records or Updating SOA records in DNS
 Knowledge Base 2131
09/22/05
Incorrect bandwidth measured for interrupted downloads
 Knowledge Base 2103
08/01/05
Security exploit involving scheduled backup vulnerability
 Knowledge Base 2057
07/15/05
Subdomain files not downloadable
 Knowledge Base 2041
06/09/05
Global subdomain map is not updated on removal of aliases
 Knowledge Base 2014
05/31/05
MailScanner conf gets overwritten
Knowledge Base 2010
05/24/05
Sendmail error due to SMTP Authentication failure
 Knowledge Base 2007
05/20/05
Disappearing commas in email aliases
Knowledge Base 2005
04/22/05
Fixes language changing issue in Squirrelmail on FC1 only
Knowledge Base 1983
04/20/05
Fixes multiple issues
Knowledge Base 1981
04/09/05
Fixes syntax difference between Spamassassin v2.6.x and 3.0.x
 Knowledge Base 1976
04/08/05
1.Support for SpamAssassin v3.0.2
2. Fixes Maillog errors after spamassassin upgrade
 Knowledge Base 1968
04/06/05
Fixes language changing issue in Squirrelmail
Knowledge Base 1967

 

Hot Fixes For Ensim Pro/Basic 4.0.2 for Linux
*Unless specified, the hotfixes apply to Ensim Pro on RHEL and Fedora Core 1.

Date
Synopsis
Installation Details
08/01/05
Security exploit involving scheduled backup vulnerability
 Knowledge Base 2056
06/09/05
Global subdomain map is not updated on removal of aliases (Fedora Core 1 & RHEL only)
 Knowledge Base 2015
05/31/05
MailScanner conf gets overwritten (Fedora Core 1 & RHEL only)
Knowledge Base 2009
04/01/05
Mail not forwarding through alias
 Knowledge Base 1961
02/17/05
Security Fix for Majordomo Vulnerability
 Knowledge Base 1931
12/30/04
Fix for PHP Security Vulnerability (Fedora Core 1 Only)
12/17/04
Fixes saslauthd problem requiring frequent restart
12/08/04
POP/IMAP/SMTP traffic not counted
11/30/04
Fixes security vulnerability arising from manual upgrade of mysql from v3.23 to v4.x
11/17/04
Upgrading bind to version 9.2.4-EL_10 breaks the site FST (RHEL only)
11/10/04
Anonymous FTP cannot be disabled in RHEL
11/02/04
SMTP Authentication fails for AUTH PLAIN for Mac Users and others (Fedora Core 1 only)
10/14/04
saslauthd daemon requires frequent restart for smtp auth to work (RHEL only)
10/06/04
'adv_quotacheck' incorrectly checks quotas, nearly all emails are rejected,
even when the site's quota is not full.
10/06/04
DNS entries for subdomains removed after edit

 

Hot Fixes For Ensim Pro/Basic 4.0.1 for Linux

Date
Synopsis
Installation Details
08/01/05 Security exploit involving scheduled backup vulnerability Knowledge Base 2055
02/17/05
Security Fix for Majordomo Vulnerability
 Knowledge Base 1935
12/30/04
Fix for PHP Security Vulnerability (Fedora Core 1 Only)
12/27/04
Multiple issues resolved
11/22/04
Upgrading bind to version 9.2.4-EL_10 breaks site FST (RHEL only)
11/08/04
Bandwidth usage reported wrongly on the site admin dashboard
10/14/04
saslauthd daemon requires frequent restart for smtp auth to work
10/06/04  
DNS entries for subdomains removed after edit
08/16/04  
A failed add of a site then fails to delete
08/11/04
SpamAssassin consumes more than 90% CPU usage.
08/11/04
Large mails block mail queue.
08/09/04
Webalizer traceback problems in Mozilla/Firefox.
08/09/04
SpamAssassin works conversely to the way it should.
08/09/04
Bug in Apache-1.3.31 causes FrontPage login failures.
08/09/04
New Site Administrator home page's encoding set to UTF-8
08/09/04
MySQL does not start correctly after lwp server crash.
08/09/04
NULL.IDA and exclog problems

Note:The fixes for Ensim Pro for Linux 3.5 will be released as soon as they are available.

Security Fixes For Ensim Pro/Basic 3.7.1 for Linux (Fedora)

WARNING:You must have Ensim Pro/Basic 3.7.1 for Linux (Fedora) installed to apply the following Security Fixes:

NOTE: Ensim Pro/Basic 3.7.1 for Linux (Fedora) is for upgrades from WEBppliance Pro/Basic 3.5.x ONLY. If you are using Ensim Pro/Basic 3.7.0 for Linux (Fedora) you do not need to upgrade to Ensim Pro/Basic 3.7.1

Date
Synopsis
Installation Details
08/02/05
Security exploit involving scheduled backup vulnerability
 Knowledge Base 2061
02/17/05
Security Fix for Majordomo Vulnerability
 Knowledge Base 1934
12/30/04
Fix for PHP Security Vulnerability (Fedora Core 1 Only)
11/03/04
SMTP Authentication fails for AUTH PLAIN for Mac Users and others
06/04/04
Multiple bug fixes
05/13/04
Fixes bandwidth reporting defect
04/27/04
Fixes security vulnerabilities

 

Security Fixes For Ensim Pro/Basic 3.7.0 for Linux (Fedora)

WARNING: You must have Ensim Pro/Basic 3.7.0 for Linux (Fedora) installed to apply the following Security Fixes:

Date
Synopsis
Installation Details
08/02/05
Security exploit involving scheduled backup vulnerability
 Knowledge Base 2060
02/17/05
Security Fix for Majordomo Vulnerability
 Knowledge Base 1938
06/04/04
Multiple Bug Fixes
05/13/04
Fixes Bandwidth reporting defect
04/27/04
Fixes security vulnerabilities
03/02/04
Fixes Site Admin security vulnerability
02/12/04
Updated phpBB and other bug fixes.