Onderwerp: DirectAdmin 1.40.1 security release

hello,

directadmin 1.40.1 has been released.
http://www.directadmin.com/versions....rsion=1.401000

it's mainly a bugfix release to address the broken commands.deny/allow feature.

There is a new feature for tracking realtime email usage (requires exim.pl update):
http://www.directadmin.com/features.php?id=1277

-----------------
security:

There is also an important custombuild change, logged into this version:
http://www.directadmin.com/features.php?id=1119

with regards to security and the followsymlinks option.
Existing boxes will not have their allowoverride options changed from "all", but we dont' recomend using that value anymore.
The reason for not changing existing boxes is that many scripts use the followsymlinks in .htaccess files, and applying this change will trigger an "internal server error" for their website, hence we leave it to you to decide.
If you'd like to implement it (recommended), run the following:

Cd /usr/local/directadmin/custombuild
./build update
./build set secure_htaccess yes
./build rewrite_confs

but you may need to manually change .htaccess files to remove the option..
Or add "allowoverride all" to:
Admin level -> custom httpd config -> domain.com

for that domain.

Note that new installs do have this option enabled by default. Existing installs do not.

Forum thread:
http://www.directadmin.com/forum/showthread.php?t=42332


-----------------

for anyone who didn't get the notice about the release of 1.40.0:
http://www.directadmin.com/versions....rsion=1.400000
http://www.directadmin.com/forum/showthread.php?t=42194

thank you,

john
-----------------------------------------------------
directadmin web control panel
http://www.directadmin.com

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

fyi..

Vandaag maar eens eventjes gaan upgraden, schijnt goed te werken op de test machine.

En doe er daarna een upgrade van CSF/LFD gelijk ook even achteraan...

Code:

5.42   - SECURITY FIX. Anyone running csf on a DirectAdmin server should
         upgrade to this release immediately:

         Add check for successful open of admin.list on DA servers to avoid
         a segfault, which could lead to a buffer overflow

Staat er ook weer op..

Nederlands taal pakket voor DirectAdmin is ook geupdate naar v1.40.1


Update ophalen doe je weer hier: http://www.ermis.nl/enhanced.zip

Oorspronkelijk geplaatst door dimitrix

Nederlands taal pakket voor DirectAdmin is ook geupdate naar v1.40.1

Weeral eens een dankje

Dankje je wel