cPanel to End Support for PHP 4 cPanel announces that EasyApache will no longer support PHP 4 beginning May, 2012. PHP 4 has not been actively developed, or supported by the PHP developers, for several years. Many CVEs reported against…
Archive for Releases
Plesk Panel 10.4.4 for Linux – CentOS 5.8 and RedHat 5.8 support – is available since March 20, 2012 through the Autoinstaller.
Plesk Panel 10.4.4 for Linux – CentOS 5.8 and RedHat 5.8 support – is available since March 20, 2012 through the Autoinstaller.
The Joomla! project is proud to announce that our application has been accepted to be a mentoring organization for the 2012 Google Summer of Code™ program (GSoC). The GSoC helps support university level students who get the opportunity to work with mentors on a variety of coding projects that will all be contributed back to the student’s mentoring organization.
This year’s Joomla! GSoC application was led by Chad Windnagle (Primary Administrator), Andrea Tarr (Secondary Administrator), and Elin Waring. Key supporters and contributors to the application process include Michael Babker, Robert Deutz, Andrew Eddie, Louis Landry, Jacques Rentzke, and Matt Thomas.
After learning of Joomla!’s acceptance into GSoC, Chad had this to say:
I’m really proud of the community effort that got put forth to be successfully accepted into GSoC this year. When I first found out that we were working on the application, and we had a week to go, I was really worried we wouldn’t make it in time. A lot of really great people have put their heads together to make this opportunity possible, and the project can’t thank those folks enough.
We have gotten accepted into the Google program, but now the fun is just beginning. This is a major win, and now we have a whole summer to mentor students and run this program successfully. I hope when we reach the end of the summer we can all feel just as successful about Joomla!’s participation in GSoC as we do right now.
Those interested in serving as a mentor for a Joomla! 2012 GSoC student project may register here:
http://www.google-melange.com/gsoc/org/google/gsoc2012/joomla
Here is the Frequently Asked Questions page for the 2012 GSoC:
http://www.google-melange.com/gsoc/document/show/gsoc_program/google/gsoc2012/faqs
– checking for references between IP addresses and domains with “Forwarding” hosting type in Plesk database
– validation for DUMP_TMP_D variable in /etc/psa/psa.conf file
The following bugs have been fixed:
[-] Wrong permission was set on /tmp folder after 10.4.4 MU#16 installing
[-] Error 404 at browsing “Downloads” report generated by AWStats
[-] Wrong IP subnets validation
[-] Unable to sync service plan with hosting disabled
At cPanel Conference 2011, cPanel announced the upcoming launch of Attracta SEO tool features within cPanel & WHM. cPanel and Attracta have launched a special site ( go.cpanel.net/attracta/ ) dedicated to partners wishing to gain full access to the upcoming…
[-] XSS injection vulnerability has been fixed in Horda
[-] XSS injection vulnerability has been fixed in Horda
Joomla 2.5.3 Released
The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.3. This is a security release. The Production Leadership Team’s goal is to continue to provide regular, frequent updates to the Joomla community. Learn more about Joomla! developement at the Developer Site.
The update process is very simple, and complete instructions are available here. Note that there are now easier and better ways of updating than FTPing the files.
Download
New Installations: Click here to download Joomla 2.5.3 (Full package) »
Update Package: Click here to download Joomla 2.5.3 (Update package) »
Note: Please read the update instructions before updating.
Instructions
Want to test drive Joomla? Try the online demo or the Joomla JumpBox. Documentation is available for beginners.
Please note that you should always backup your site before upgrading.
Release Notes
Check the Joomla 2.5.3 Post-Release FAQs to see if there are important items and helpful hints discovered after the release.
Statistics for the 2.5.3 release
- Joomla 2.5.3 contains:
- 2 security issues fixed
Security Issues Fixed
- High Priority – Core – Privilege Escalation. More information »
- High Priority – Core – Password Change. More information »
Joomla! Bug Squad
Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug in Joomla, please report it on the Joomla! CMS Issue Tracker.
Active members of the Joomla Bug Squad during this last release cycle include: A Firoozmandan, Akarawuth Tamrareang, Alain Rivest, Andrea Tarr, Andrew Eddie, Bill Richardson, Brian Teeman, Chris Davenport, Christophe Demko, Denise McLaurin, Dennis Hermacki, Elin Waring, Emerson Rocha Luiz, Francisco Marzoa, Ian MacLennan, Jacob Waisner, Jacques Rentzke, James Brice, Janich Rasmussen, Jean-Marie Simonet, Jennifer Marriott, Jeremy Wilken, Kevin Griffiths, Loyd Headrick, Mark Dexter, Matt Thomas, Michael Babker, Mutuga Kigumi, Neil McNulty, Nikolai Plath, Ofer Cohen, Prasit Gebsaap, Rachmat Wakjaer, Rob Clayburn, Roland Dalmulder, Rouven Weßling, Rune Sjøen, Samuel Moffatt, Shaun Maunder, Sudhi Seshachala, Tim Plummer, Tom Fuller, Troy Hall, Viet Hoang Vu.
Bug Squad Leadership: Mark Dexter Coordinator; Elin Waring and Marijke Stuivenberg, Team Leaders.
Joomla! Security Strike Team
A big thanks to the Joomla! Security Strike Team for their ongoing work to keep Joomla secure. Members include: Airton Torres, Alan Langford, Bill Richardson, Elin Waring, Jason Kendall, Marijke Stuivenberg, Mark Dexter, Michael Babker, Rouven Weßling, Samuel Moffatt.
Links to autoinstaller:
http://download1.parallels.com/Plesk/PP10/10.4.4/SuSE12.1/parallels_installer_v3.11.0_build120110.11_os_SuSE_12.1_i386
http://download1.parallels.com/Plesk/PP10/10.4.4/SuSE12.1/parallels_installer_v3.11.0_build120110.11_os_SuSE_12.1_x86_64
Links to major EZ templates:
http://download1.parallels.com/Plesk/PP10/10.4.4/SuSE12.1/vztemplates/pp10-suse-12.1-x86-ez.tar.gz
http://download1.parallels.com/Plesk/PP10/10.4.4/SuSE12.1/vztemplates/pp10-suse-12.1-x86_64-ez.tar.gz
Links to versionless EZ templates:
http://download1.parallels.com/Plesk/PP10/10.4/SuSE12.1/vztemplates/pp-suse-12.1-x86-ez.tar.gz
http://download1.parallels.com/Plesk/PP10/10.4/SuSE12.1/vztemplates/pp-suse-12.1-x86_64-ez.tar.gz
To simplify the process of installing Micro-updates for earlier Parallels Plesk Panel (PP) versions to PVC containers Plesk Service Team has prepared a special EZ template called ‘pp-microupdates’. The template is to be installed either on a container with PP (8.6.0 or later) or in the same transaction with other PP templates.
Plesk Panel 10.4.4 for SuSE 12.1 support – new OS version support – is available since Mart 14, 2012 through the Autoinstaller, vzcatalog and vzup2date.
Download page: http://www.parallels.com/download/plesk/10/
Links to Autoinstaller:
http://download1.parallels.com/Plesk/PP10/10.4.4/SuSE12.1/parallels_installer_v3.11.0_build120110.11_os_SuSE_12.1_i386
http://download1.parallels.com/Plesk/PP10/10.4.4/SuSE12.1/parallels_installer_v3.11.0_build120110.11_os_SuSE_12.1_x86_64
Links to major EZ templates:
http://download1.parallels.com/Plesk/PP10/10.4.4/SuSE12.1/vztemplates/pp10-suse-12.1-x86-ez.tar.gz
http://download1.parallels.com/Plesk/PP10/10.4.4/SuSE12.1/vztemplates/pp10-suse-12.1-x86_64-ez.tar.gz
Links to versionless EZ templates:
http://download1.parallels.com/Plesk/PP10/10.4/SuSE12.1/vztemplates/pp-suse-12.1-x86-ez.tar.gz
http://download1.parallels.com/Plesk/PP10/10.4/SuSE12.1/vztemplates/pp-suse-12.1-x86_64-ez.tar.gz
New syntax is:
plesk_password_changer.php <old admin password> [new admin password] [options]
Where [options] can be:
–all – [default] reset passwords for all supported entities
–admin – reset password for admin
–resellers – reset passwords for resellers
–clients – reset passwords for clients
–domains – reset passwords for main FTP account of domains
–domainadmins – reset passwords for Domain Administrators
–users – change passwords for hosting panel users
–additionalftpaccounts – reset passwords for additional FTP accounts for domains
–subdomains – reset passwords for subdomains. NOTE: For Plesk 10.x subdomains treated as domains.
–webusers – reset passwords for Web Users
–mailaccounts – reset passwords for mail accounts
For example, next command
"%plesk_dir%additionalPleskPHP5php.exe" -d safe_mode=0 plesk_password_changer.php setup s3$ret! --admin --clients
means that passwords for admin and clients will be reset, password for admin will be "s3$ret!" (without quotes)
On Monday, March 12, 2012, cPanel will travel to Austin, Texas and join a number of Partners, industry friends, and hosting guru’s at this year’s South by Southwest 2012 (SxSW) conference. cPanel & WHM powers some of the largest and most…
Plesk Service Team is pleased to introduce the PHP 5.x EZ template that allows you to update PHP up to version 5.3 on installed Plesk server.
Plesk Service Team is pleased to introduce the PBA-S+Plesk Mass Password Reset Script.
In case Plesk Panel is registered as a Plesk node in PBA-S, after resetting passwords with plesk_password_changer, integration between Plesk and PBA-S will be affected.
In order to recover integration with Plesk you need to run the following script – reset_plesk_passwords.pl – on the PBA-S management node.
This script will change passwords for Plesk instances that are stored in PBA-S database as well as admin password that is used for connecting to Plesk node.
[+] phpMyAdmin has been updated to version 3.4.10.1
The following bugs have been fixed:
[-] Can’t modify database through phpMyAdmin 3.4.9
Plesk Service Team is pleased to introduce the PBAS+Plesk Mass Password Reset Script.
In case Plesk Panel is registered as a Plesk node in PBAS, after resetting passwords with plesk_password_changer, integration between Plesk and PBAS will be affected.
In order to recover integration with Plesk you need to run the following script – reset_plesk_passwords.pl – on the PBAS management node.
This script will change passwords for Plesk instances that are stored in PBAS database as well as admin password that is used for connecting to Plesk node.
Plesk Service team is pleased to introduce the ‘plesk_remote_vulnerability_checker’ script that is intended to allow Plesk owners to find out if their server with Plesk Panel 8.x, 9.x, 10.0, 10.1, 10.2 or 10.3 is vulnerable.
Joomla 2.5.2 Released
The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.2. This is a security release. The Production Leadership Team’s goal is to continue to provide regular, frequent updates to the Joomla community. Learn more about Joomla! developement at the Developer Site.
The update process is very simple, and complete instructions are available here. Note that there are now easier and better ways of updating than FTPing the files.
Download
New Installations: Click here to download Joomla 2.5.2 (Full package) »
Update Package: Click here to download Joomla 2.5.2 (Update package) »
Note: Please read the update instructions before updating.
Instructions
Want to test drive Joomla? Try the online demo or the Joomla JumpBox. Documentation is available for beginners.
Please note that you should always backup your site before upgrading.
Release Notes
Check the Joomla 2.5.2 Post-Release FAQs to see if there are important items and helpful hints discovered after the release.
Statistics for the 2.5.2 release
- Joomla 2.5.2 contains:
- 2 security issues fixed
Security Issues Fixed
- High Priority – Core – SQL Injection. More information »
- Medium Priority – Core – XSS Vulnerability. More information »
Joomla! Bug Squad
Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug in Joomla, please report it on the Joomla! CMS Issue Tracker.
Active members of the Joomla Bug Squad during this last release cycle include: A Firoozmandan, Akarawuth Tamrareang, Alain Rivest, Andrea Tarr, Andrew Eddie, Ashwin Date, Bill Richardson, Brian Teeman, Chris Davenport, Christophe Demko, Denise McLaurin, Dennis Hermacki, Elin Waring, Emerson Rocha Luiz, Francisco Marzoa, Ian MacLennan, Jacob Waisner, Jacques Rentzke, James Brice, Janich Rasmussen, Jean-Marie Simonet, Jennifer Marriott, Jeremy Wilken, Kevin Griffiths, Loyd Headrick, Mark Dexter, Matt Thomas, Michael Babker, Mutuga Kigumi, Neil McNulty, Nikolai Plath, Ofer Cohen, Prasit Gebsaap, Rachmat Wakjaer, Rob Clayburn, Roland Dalmulder, Rouven Weßling, Rune Sjøen, Samuel Moffatt, Shaun Maunder, Sudhi Seshachala, Tim Plummer, Tom Fuller, Troy Hall, Viet Hoang Vu.
Bug Squad Leadership: Mark Dexter Coordinator; Elin Waring and Marijke Stuivenberg, Team Leaders.
Joomla! Security Strike Team
A big thanks to the Joomla! Security Strike Team for their ongoing work to keep Joomla secure. Members include: Airton Torres, Alan Langford, Bill Richardson, Elin Waring, Jason Kendall, Marijke Stuivenberg, Mark Dexter, Omar Ramos, Rouven Weßling, Samuel Moffatt.
Plesk Service team is pleased to introduce the ‘plesk_remote_vulnerability_checker’ script that is intended to allow Plesk owners to find out if their server with Plesk Panel 8.x, 9.x, 10.0, 10.1, 10.2 or 10.3 is vulnerable.
The Joomla! project is submitting an application to Google to participate in this year’s Google Summer of Code™ (GSoC) program. To be an applicant we need to have some help from our community. We are looking for talented individuals who are able to work well with students to be mentors, as well as for the community to generate ideas for the GSoC students to build.
For Mentors:
Participating in GSoC is a great opportunity for the Joomla community to collect some energy from new blood in the Joomla project, pairing talented individuals eager to learn with skilled mentors, community members who can guide and assist navigating the seas of Open Source Development in the Joomla Project.
If you would like to mentor projects this year please visit the Mentor page where we will be posting up mentor information. This will be a short list of requirements from you, as well as an application form that you will need to fill out. We welcome anyone to submit to be a mentor.
For Ideas
There are two major categories in the Joomla! Project where students will be able to contribute to this year. Unlike past Programs where there was only the CMS to work on, this year students can choose between working on the Joomla CMS itself or the Joomla Platform Project that the CMS is based on.
If you’re a developer who has some time this summer to help out, we invite and encourage you to add an idea to the Joomla GSOC Idea Page for 2012, as well as add to the discussions in the Joomla GSOC Google Group.
For continued compatibility with the latest versions of cPanel & WHM, please update your server to CentOS 6 or RHEL 6.CentOS and Red Hat discontinued support for version 4 of their respective operating systems on February 29, 2012. cPanel & WHM version 11.32 will…
The March issue of the Joomla Community Magazine is here!
Our stories this month:
EDITOR’S INTRODUCTION
If You Want To Build A Lighthouse…, by Paul Orwig
FEATURE STORIES
Interview with Steve Burge of OSTraining, by Alice Grevet
Meet Paul Orwig: An Interview with the New OSM President, by Gabe Wahhab
Best Ukrainian sites made on Joomla CMS, by Denys Nosov
PROJECT NEWS
Leadership Highlights from February 2012, by Alice Grevet
SITEBUILDERS
Joomla and Smartphones, by Hagen Graf
DESIGNERS
No Programming? No Worries!, by Graeme King
ADMINISTRATORS
Joomla ACL: Improving usability by customizing the login screen for different access levels, by Jen Kramer
DEVELOPERS
Managing Your Modules Has Never Been So Easy, by Ofer Cohen
HELP WANTED
The Joomla! Project Wants You – March 2012, by Paul Orwig
Help Wanted: International Joomla! Shop Team Members, by Dianne Henning
BUSINESS MATTERS
Make More Money By Properly Setting Your Hourly Rate, by Gabe Wahhab
Releasing A Commercial Extension? Top 5 Things Every Developer Must Know, by Gabe Wahhab
Why Your Clients Need a Mobile Joomla Site and How to Sell it To Them, by Luke Summerfield
EVENTS
2012 J!OSCAR Awards Announced – Nominations close April 27, by Victor Drover
JoomlaDay events in March 2012, by Jacques Rentzke
Joomla Groups Enhance Your Exposure to the Community Worldwide, by Tuan Bui
THE JOOMLA! HAIKUS
Post your haikus for March, by Paul Orwig
In our next issue
We want to publish your Joomla! story in the next JCM issue! So take a look at our Author Resources content to get a better idea of what we are looking for, and then register to become a JCM author and submit your Joomla! story!
The following bugs have been fixed:
[-] Panel security vulnerability
The following bugs have been fixed:
Note about 2Gb files size limit at upload backup file using Panel UI has been added
Autoinstaller on windows hangs on at executing during upgrade
Multiple Cross-Site Scripting in Panel
Unexpected error is reported by websrvmng on adding already existed MIME type
Watchdog notifications doesn’t pass SPF handler
Plesk Service Team is pleased to introduce the Plesk Mass Password Reset Script.
The script is designed to allow Plesk owners to reset passwords of all accounts in Plesk by an automated way.