Ike.ninja

The following issues were resolved:

[-] (Linux) Upgrading Parallels Plesk Panel to 11.5 failed if the Panel administrator’s password contained the backslash sign (“\”). (PPPM-1084)
[-] (Linux) The bootstrapper script could not connect to the apsc database after a failure on upgrade. (PPPM-1118)
[-] (Linux) The bootstrapper script (bootstrapper.sh repair) did not upgrade the apsc database. (PPPM-1134)
[-] (Linux) The bootstrapper script (bootstrapper.sh repair) failed if the package pp-sitebuilder was installed but there was no Sitebuilder database or user. (PPPM-909)
[-] (Linux) After upgrading from Panel 10.x to 11.x, the location of the cgi-bin directory could be incorrect (not in the webspace or www-root directory). (PPPM-810)
[-] (Linux) It was impossible to configure Panel installed on openSuSE 12.3 x64.
[-] (Linux) Panel upgrade failed if the same database user was assigned to multiple databases. (PPPM-1144)
[-] (Linux) Panel 11.5 could not restore vhost.conf and cron tasks from backup files of previous Panel versions.
[-] (Linux) PHPMyAdmin failed to export databases with the error “502 Bad Gateway: stderr: zend_mm_heap corrupted”. (PPPM-865)
[-] (Linux) The crontab secure shell settings were set to default ones after Panel upgrading. (PPPM-1163)
[-] (Linux) The absence of core.version lead to failed upgrade. (PPPM-934)
[-] (Windows) Web hosting reconfiguration for a large number of sites during a Panel upgrade could cause an upgrade failure. (PPPM-1150)
[-] (Windows) The Help window popped up while typing ‘p’ in Internet Explorer 11. (PPPM-1152)
[-] (Windows) Messages about missing “.pyc” files appeared in Parallels Installer console. (PPPM-1145)

The following features were added:

[+] (Windows) BIND DNS server was updated to version 9.9.4-P1, CVE-2013-6230 vulnerability is closed.
[+] (Windows) Horde webmail was updated to version 5.1.5, CVE-2013-6275 vulnerability is closed.

The following issues were resolved:

[-] The piped logging feature did not write access_logs for add-on domains and subdomains.
[-] Plesk could not register PHP handlers because of wrong directives in php.ini or if running php -v returned exit code 1. (PPPM-808, PPPM-885)
[-] Chained SSL certificates no longer worked with nginx after upgrade.
[-] During upgrade to Plesk 11.5, the directories of add-on domains were incorrectly relocated in the new structure of virtual hosts.

The following functionalities were improved:

The following issue was resolved:

[-] File manager could not open files for viewing if these files contained umlauts or symbols encoded in CP1251. (PPPM-942)

​The following feature has been added:

[+] Backup signing. Panel signs backup files when they are downloaded or exported to external FTP repositories. The signature lets administrators distinguish trustworthy backups in the list of backups available for restoration. Learn more at http://kb.parallels.com/118188.

The following bug has been fixed:

[-] Panel did not display images in text widgets on websites that were reverted from a snapshot made on another domain. (142049, PPPM-992)

The following features have been added:

The following issues have been fixed:

[-] Panel did not apply automatic updates to the Migration & Transfer Manager in some cases.
[-] Administrators could not change the ASP.NET version on a subscription by means of the ‘subscription’ command-line utility. (PPPM-974)
[-] Administrators could not create subscriptions by means of the ‘subscription’ command-line utility if the webmail software was not installed on the server. (142956)
[-] The Postfix mail queue contained messages with the value “Not Found” in the “From” field. (PPPM-968)

The following features have been added:

The following issues have been fixed:

[-] Security improvements.
Important: Regular updates of Parallels Plesk Panel and third-party components guarantee that your server stays secure against malicious attacks
[-] (Linux only) Panel sent notifications about installed updates even if the updates were not installed. (142630)
[-] (Linux only) Panel used wrong IP address of Point-to-Point network interface. (141410, 143114)
[-] Horde stored mail attachments on the file system for 6 months instead of attaching them to emails. Horde feature “Link attachments” was switched off. (143316)
[-] (Windows only) Panel showed warnings while backing up domains with Punycode. (142611)
[-] (Linux only) Panel did not send the “Subscription expiration warning” notifications. (142823)
[-] (Linux only) Panel hung while backing up a domain had a lot of files without the reading permission for the domain owner’s system user. (142456)
[-] (Windows only) Panel did not back up server settings if the Panel database was stored in MSSQL (142694)

The following issue has been fixed:
 
[-] Security improvements*. Important: Regular updates of Parallels Plesk Panel and third-party components guarantee that your server stays secure against malicious attacks.
 
* – We would like to thank Combell Group for assistance with discovering this issue.

The following issue has been fixed:
 
[-] Security improvements*. Important: Regular updates of Parallels Plesk Panel and third-party components guarantee that your server stays secure against malicious attacks.
 
* – We would like to thank Combell Group for assistance with discovering this issue.

The following issues have been fixed:

[-] Administrators were unable connect to remote MySQL servers if their passwords contained the ampersand (“&”) symbol. (141662)
[-] Panel failed to back up subscriptions with additional vhost/ssl/nginx settings with XML-unescaped symbols (141708)
[-] (Linux only) Panel did not concatenate chained certificates bundles provided by Geotrust to the main certificate in the nginx configuration. (113865)
[-] Customers could not use the controls on the “File Sharing” tab if they set the preferred domain with the “www” prefix.
[-] (Linux only) Customers could not access the “File Sharing” tab after Panel was upgraded to version 11.5 if client.id for the administrator was not 1. (141589)
[-] File sharing did not work for domains with international domain names.
[-] (Linux only) PhpMyAdmin failed to export databases with the error “502 Bad Gateway” (141734)
[-] (Linux only) Some upgrade scripts failed if the client.id for administrator was not 1. (141589)

The 11.1 MU#14 update is recommended for all Plesk Automation users and includes general functionality fixes that improve the stability, compatibility, and security of your Plesk Automation server.
This update includes internal improvement regarding to reporting of license keys statistics to KA and a couple of bug fixes to improve stability of PPA utility “service node checker”.

To ensure optimal server reliability and security, Parallels strongly recommends keeping your operating system and Plesk Automation software up-to-date.

What’s Changed

[*] The stability of the check_service_node utility was improved.

[*]Security improvements.

The following issues have been fixed:

[-] (Linux only) Customers could receive the “Mail Not Delivered” messages even if their email was delivered successfully. (119925)
[-] (Linux only) The virus definitions of Parallels Premium Antivirus by Dr. Web were not updated if the default trial license key was used. (139833)
[-] (Linux only) After Panel was upgraded from version 11.0, PHP scripts could no longer be processed by nginx if SELinux was turned on. The following error was recorded in /var/log/php-fpm/error.log: “php-fpm.sock failed (13: Permission denied)”. (140941) [-] (Linux only) In some cases, Panel did not validate DNS record conflicts if CNAME records were manually modified. The DNS server failed to start. (141147)
[-] (Linux only) The RoundCube webmail was not working due to various errors (PHP errors, memory exhaustion, and so on) if certain classes or functions such as ini_get were disabled in the server-wide php.ini file. (141201)
[-] (Linux only) After upgrading Plesk from version 9.5, customers could no longer back up domains that had subdomains. The following error occurred: “Cannot savedir: Permission denied”. (141214)
[-] (Linux only) The subscription command-line utility could not change the PHP handler for websites. (141238)
[-] (Linux only) Subscriptions could not be synchronized with a service plan if the plan was created using command-line utilities and access to shell was not allowed or was set to chroot. (141254)
[-] (Linux only) The allow and deny access directives of Apache .htaccess worked incorrectly if a reverse proxy in nginx was enabled. (141265)
[-] (Linux only) If Panel was installed without updates, and updates were installed afterwards, email messages could not be sent. The following error occurred: “Warning: the Postfix sendmail command must be installed without set-uid root file permissions”. (141283)
[-] (Linux only) Administrators were unable to turn off the nginx reverse proxy. The following error occurred: “Service /etc/init.d/nginx failed to stop”. (141297)
[-] (Linux only) Customers could not disable DomainKeys email signing on domains after it had been enabled. (141316)
[-] The help page of the dns command-line utility was not localized. (141368)
[-] The help page of the server_dns command-line utility contained errors. (141374)
[-] Backing up to external FTP repositories did not work properly. (141100 and 141338)
[-] Updating of reseller service plans via API-RPC could result in the following error: “PHP Fatal error: Call to undefined method”. (141439)
[-] After upgrading from Plesk 9 it was impossible to remove email accounts with mail forwarding. The following error occurred: “PHP Fatal error: Call to undefined method”. (141453)
[-] Customers could use webmail on their domains even if the domains were suspended. (84187)
[-] (Linux only) Qmail did not accept email messages sent to mailing lists on domain aliases. The following error occurred: “550 sorry, no mailbox here by that name. (#5.7.17)”. (107619)
[-] (Linux only) Panel failed to migrate the Mailman data and settings if the default locale of the source server was German. (133147)
[-] Panel failed to migrate mail relay settings from Plesk 9.x with the error “Unable to set relaying type”. (140277)
[-] (Linux only) Panel failed to migrate databases that use latin-1 character set. In the migrated databases, non-ASCII characters were replaced with question marks. (141027)
[-] Panel did not pass database user passwords to event handlers. (141261)
[-] (Linux only) When administrators executed the statistics utility for a single domain, Panel removed FTP log records for other domains. (141378)
[-] Email notifications about resource overuse that were sent on behalf of the administrator contained wrong sender email addresses. (141380)
[-] Administrators had to complete the post-install configuration of Panel before they could use the server_dns command-line utility. (141502)
[-] Security improvements. (141537)
[-] (Linux only) Kaspersky Antivirus could not be switched on via the API-RPC. (141491)
[-] (Linux only) Message submission did not work after installing updates on Panel 11.5.30. (141740)
[-] (Windows only) Domains could not be migrated from Plesk 9 if mail accounts on source servers had a password containing a quotation mark (“) (141054)
[-] (Windows only) AWStats statistics processed log files very slowly because of excessive DNS lookups. (137500)
[-] (Windows only) IP addresses that were no longer used could not be removed from the server IP pool. The following error occurred: “The IP address x.x.x.x is already used for hosting”. (141139)
[-] (Windows only) Panel did not include some DNS records from the server-wide DNS template into DNS zones of newly created domains. (132577)
[-] (Windows only) Users were unable to log in to Control Panel from Customer & Business Manager by clicking Business Operations > Subscriptions > <subscription name> > Log In. They encountered the following error: “Internal error: SQLSTATE[42S22]: Column not found: 1054 Unknown column ‘externalId’ in ‘where clause’.” (141454)
[-] (Windows only) Users were unable to import database backups through phpMyAdmin. (141524)

The following issues have been fixed:

[-]Security improvements. We would like to thank Rack911.com for their help in investigating a number of security issues.