Book Mark

Ike.ninja

Linux Fun
  • Home
  • How to
  • Reference Links
  • Categories
    • Releases
    • Plesk
    • Community
    • CMS
    • security
    • MYSQL
    • cPanel
  • Tools
    • IP Checker
    • Byte Converter
RSS

Joomla 2.5.6 Released

Jun19
by Ike on June 19, 2012 at 9:00 pm
Posted In: CMS, Community, Joomla, Project Release News, Releases

Security Release

The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.6. This release fixes several high-priority problems with version 2.5.5. The Production Leadership Team’s goal is to continue to provide regular, frequent updates to the Joomla community. Learn more about Joomla! development at the Developer Site.

The update process is very simple, and complete instructions are available here. Note that there are now easier and better ways of updating than copying the files with FTP. If you are using the one click method, it has now moved under Components/Joomla Update.

Download

New Installations: Click here to download Joomla 2.5.6 (Full package) »

Update Package: Click here to download Joomla 2.5.6 (Update package) »

Note: Please read the update instructions before updating.

Instructions

  • New installation and technical requirements
  • Migration from Joomla! 1.5.x

Want to test drive Joomla? Try the online demo or the Joomla JumpBox. Documentation is available for beginners.

Please note that you should always backup your site before upgrading.

Release Notes

Check the Joomla 2.5.6 Post-Release FAQs to see if there are important items and helpful hints discovered after the release.

Statistics for the 2.5.6 release period

  • Joomla 2.5.6 contains:
    • 12 tracker issues fixed

 

Tracker Issues Fixed

ID Summary/Link Category
28554 Mark JXMLElement as deprecated and don’t use it in type hinting Platform
28650 Use legacy aliases for the MVC in the site Components
28684 JApplication::registerEvent() is not static anymore causing a fatal error Platform
28685 Edit article Button missing after upgrade to teh latest version 2.5.5 from 2.5.4 Administration
28689 FinderController duplicate lines Components
28694 Delete toolbar broken in com_media in 2.5.5 Components
28695 Lang string missing Languages
28698 Fatal error updating with Extension manager > Install None
28700 Fix a potentially fatal issue in JXMLElement Platform
28702 404 Hits of com_redirect fails after Manual update Administration
28703 JUser class is missing the public vars for the 2 new columns lastResetTime and resetCount None
28704 Menu type aliases causing fatal php error Modules

 

Joomla! Bug Squad

Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug in Joomla, please report it on the Joomla! CMS Issue Tracker.

Active members of the Joomla Bug Squad during this last release cycle include: A Firoozmandan, Akarawuth Tamrareang, Andrea Tarr, Bill Richardson, Brian Teeman, Christophe Demko, Dennis Hermacki, Elin Waring, Emerson Rocha Luiz, Ernest E Vogelsinger, Harald Leithner, Herve Boinnard, Holger Brandt, Jacob Waisner, Jean-Claude Richard, Jean-Marie Simonet, Jeremy Wilken, Juan Antonio Ruzafa, Kevin Griffiths, Loyd Headrick, Marijke Stuivenberg, Mark Dexter, Matt Thomas, Michael Babker, Nicholas Dionysopoulos, Nick A., Nick Savov, Nikolai Plath, Ofer Cohen, Prasit Gebsaap, Rachmat Wakjaer, Radek Suski, Rob Clayburn, Rob Joyce, Roland Dalmulder, Rouven Weßling, Rune Sjøen, Shaun Maunder, Soheil Novinfard, Sudhi Seshachala, Troy Hall, Viet Vu.

Bug Squad Leadership: Mark Dexter, Coordinator; Elin Waring and Marijke Stuivenberg, Team Leaders.

Joomla! Security Strike Team

A big thanks to the Joomla! Security Strike Team for their ongoing work to keep Joomla secure. Members include: Airton Torres, Alan Langford, Bill Richardson, Elin Waring, Gary Brooks, Jason Kendall, Jean-Marie Simonet, Jeremy Wilken, Marijke Stuivenberg, Mark Dexter, Michael Babker, Rouven Weßling, Samuel Moffatt.


└ Tags: Project Release News
 Comment 

[20120602] – Core – Information Disclosure

Jun19
by Ike on June 19, 2012 at 7:21 am
Posted In: CMS, Core Security, Joomla, security
  • Project: Joomla!
  • SubProject: All
  • Severity: Low
  • Versions: 2.5.4 and all earlier 2.5.x versions
  • Exploit type: Information Disclosure
  • Reported Date: 2012-May-1
  • Fixed Date: 2012-June-18

Description

Inadequate filtering leads SQL error and information disclosure.

Affected Installs

Joomla! versions 2.5.4 and all earlier 2.5.x versions

Solution

Upgrade to version 2.5.5

Reported by Jakub Galczyk

Contact

The JSST at the Joomla! Security Center.

└ Tags: Core Security
 Comment 

[20120601] – Core – Privilege Escalation

Jun19
by Ike on June 19, 2012 at 7:21 am
Posted In: CMS, Core Security, Joomla, security
  • Project: Joomla!
  • SubProject: All
  • Severity: Medium High
  • Versions: 2.5.4 and all earlier 2.5.x versions
  • Exploit type: Privilege Escalation
  • Reported Date: 2012-April-29
  • Fixed Date: 2012-June-18

Description

Inadequate checking leads to possible user privilege escalation.

Affected Installs

Joomla! versions 2.5.4 and all earlier 2.5.x versions

Solution

Upgrade to version 2.5.5

Reported by Nils Rückmann

Contact

The JSST at the Joomla! Security Center.

└ Tags: Core Security
 Comment 

Joomla 2.5.5 Released

Jun18
by Ike on June 18, 2012 at 12:00 am
Posted In: CMS, Community, Joomla, Project Release News, Releases

Security Release

The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.5. This is a security release. The Production Leadership Team’s goal is to continue to provide regular, frequent updates to the Joomla community. Learn more about Joomla! development at the Developer Site.

The update process is very simple, and complete instructions are available here. Note that there are now easier and better ways of updating than copying the files with FTP.

Download

New Installations: Click here to download Joomla 2.5.5 (Full package) »

Update Package: Click here to download Joomla 2.5.5 (Update package) »

Note: Please read the update instructions before updating.

Instructions

  • New installation and technical requirements
  • Migration from Joomla! 1.5.x

Want to test drive Joomla? Try the online demo or the Joomla JumpBox. Documentation is available for beginners.

Please note that you should always backup your site before upgrading.

Release Notes

Check the Joomla 2.5.5 Post-Release FAQs to see if there are important items and helpful hints discovered after the release.

Statistics for the 2.5.5 release period

  • Joomla 2.5.5 contains:
    • 11 new features added
    • 2 Security issues fixed
    • 113 tracker issues fixed

New Features Added

The following new features have been added, with links to the Feature tracker issue.

  • Add abiltiy to copy a template (Mark Dexter)
  • Implementation of Terms of Service (Peter Osipof, Jean-Marie Simonet)
  • Option to disable the ability to change the Username in Profile (Viet Vu)
  • Set the CSS class for JForm field label (Leo Lammerink, Jean-Marie Simonet)
  • Add counter to redirect component (Ronald Pijpers)
  • Add feature readmore in feed items. Also bugfix for fulltext in feed items.(Jurian Even, Jean-Marie Simonet)
  • Media formfield: show preview (Benjamin Piek, Jean-Marie Simonet)
  • Add the ability to limit the number of password resets within a time period (Mark Dexter, Sudhi Seshachala)
  • Improve user feedback during automatic version update (Mark Dexter, Ofer Cohen, Jean-Marie Simonet)
  • Add buttons in each menu selection tab in the module admin manager. (Mathieu Cattin)
  • Multi-File Upload (Elijah Madden)

See Jean-Marie Simonet’s blog for more information about these features.

Security Issues Fixed

  • Medium High Priority – Core – Privilege Escalation. More information »
  • Low Priority – Core – Information Disclosure. More information »

Tracker Issues Fixed

ID Summary/Link Category
28589 *ACL regression in com_search ACL
28602 *Menu Item Manager: Show Batch Processing only if allowed ACL
28607 Missing direct access check for com_finder ACL
28605 ACL regression in com_finder ACL
28611 *ACL: Module Manager: Show Batch Processing only if allowed ACL
28587 *ACL regression in com_redirect ACL
27819 The articles model displays articles for which there is no category access [+fix] ACL
28588 *ACL regression in com_messages ACL
28646 *New user registration approval should only be possible when Create permission ACL
28205 Remove ‘Display: no’ modules from Module Assignment list (1.7), or button to hide them Administration
28572 *Administration user notes checked on notes page gives warning arugment missing Administration
28481 Edit Menu Item: Modules appears multiple times in the list Administration
28456 Error 500 when Logging back in after timeout Administration
24839 Incorrect tooltip for Sticky column icons in Banner Manager: Banners Administration
28428 Backend uses incorrert cache path for system caches – text filters can be reseted to defaults with e Administration
28467 *configuration.php smtp saves auto-filled admin username and password Administration
28411 Site breaks when deleting alternate style which is in use Administration
28354 Problem logging out if Public group has admin login permission Authentication and Login
28436 Wrong group in ldap and joomla authentication-plugin XML-file Authentication and Login
27737 Clean up the unit tests Automated Testing
28569 Correct docblocs in com_joomlaupdate. Code Quality
28380 *Normalizing Beez_20 css and js loading Code Quality
28420 discover_install of components does not trigger custom install method Code Quality
28570 Backport JAccess::getActionsFrom*** Code Quality
28553 Improve code for 28205. Code Quality
28514 duplicate line in user.php Code Quality
28547 ACL consistency – Use the API and access.xml everywhere. Code Quality
28285 E_NOTICE about array to string conversion in debug.php with PHP 5.4 Code Quality
28457 *Unused $offset_user parameter in configuration Code Quality
28548 Use instanceof instead of is_a() Code Quality
28555 Fix files that are CRLF. Code Quality
28442 Update Library Manifests Code Quality
28440 *load language file from com_media front end Code Quality
28521 Use doExecute instead of execute in CLI scripts Code Quality
28360 Get rid of assign() and assignRefs() uses in view: Installation Code Quality
28613 Use fewer deprecated methods. Code Quality
28305 Remove a few unnecessary import() calls. Add a missing import(). Code Quality
28335 Simplify schema path in installation, add support for other databases Code Quality
28336 e-strict error in com_messages Code Quality
28600 Add a code style checker Code Quality
28609 Update joomlaupdate @SInCE tags missed in 61f5ee8. Code Quality
28652 *Strict standards administrator/components/com_config/models/application.php Code Quality
28660 Fix code style errors Code Quality
28370 Get rid of assign() uses in view: admin + site Code Quality
28375 Remove blacklist code from FinderIndexerHelper Code Quality
28546 Trunk is broken due to a PHP error in JComponentHelper Components
28614 Add option to enable/disable logging in Smart Search Components
28536 Undefined variable $prev in com_config Components
28619 Fix #24510 to not add code specific to the profile plug-in to com_users Components
28276 Finder/Smart Search: Deleting an item does not remove it from Finder’s index Components
28022 Smart search and unpublished Content Maps fails after edit of an article Components
28398 Missing “remember me” in com_users Components
28579 Fix xreference regression from 1.7 to 2.5 Components
28591 Content triggers in Category and Featured views only apply to first few articles Components
21946 Redirect component produces error Components
28351 Remove extra images from finder Components
28339 Incorrect parameter passed to onUserAfterDeleteGroup event Components
28608 Remove unused file in com_users Components
28615 Backport union query element from Platform 12 and use it in Smart Search Database
28525 Fix JForm::load() not replacing form field in same location Forms
28426 only a single JFormFieldColor field can exist (functionally) within a form Forms
28598 *Article Category list displays hits in author column if no article author or createdbyalias Front End
28025 Joomla Bugfix: Exchange of wrong picture by hide.js fixed Front End
28670 SQL error when installing trunk without sample data Installation
27772 Selecting ‘Install Sample Data’ button causes ‘invalid security token’ error message if ‘Next’ butto Installation
28400 Help Site URL Defaulting to Version 1.6 Installation
28642 Clean up the installation a tiny bit Installation
28345 Call to member function of non-object: setDebug() Installation
28551 Fix som issues with exceptions Installation
27651 JInstallationModelDatabase::initialise has hard coded MySQL version check Installation
28550 Default admin user created with id 42 Installation
28149 ImageManager Javascript Error Javascript
28505 *Multilang validation errors when SEF is off Languages
28407 *Browser Settings for new visitors broken in multilanguage Languages
28571 Typo in en-GB.com_templates.ini Languages
28639 New User Account Activation Tooltip Clarification Languages
28592 Language in component folder Languages
28453 Language override doesn’t handle double quotes properly Languages
28673 JSON data returned when uploading oversized file Media Manager
28384 Duplicate ‘home’ in breadcrumbs in a multi-language site Modules
28192 Bug in mod_articles_news in version 1.7 and 2.5 Modules
28483 *Weblinks module should only pass on category related queries when catid > 0 Modules
28526 bug in mod_articles_news Modules
28487 Menu Item Alias does not obey Secure Setting of Aliased Item Modules
28210 onchange event does not fire at JFormFieldMedia (Regression) Platform
28632 Backport JCrypt (only with the simple chipher) Platform
28549 Provide legacy aliases for the MVC classes Platform
28648 Backport some deprecation info to the base package Platform
28645 Clean up the session package based on what was done in the platform. Platform
28287 Fix some differences between platform and cms. Backport CSS changes Platform
28309 Improve forward compatability with Joomla 3.0 by making JDatabaseException extend RuntimeException Platform
28419 Remove warnings for undeprecated code. Fix a bug in JView in the process. Platform
28561 Move some JFormFields from the platform to the CMS Platform
28378 Backport JInput:def() from the platform Platform
28377 Backport JDatabase::execute() Platform
28560 Backport some files completely from the current platform Platform
28599 Backport the new JLoader from the platform 12.1 Platform
28343 Backport JInputFiles fix from Platform Platform
28421 Update PHPMailer to 5.2.1 Platform
28649 Backport small changes to the MVC from the platform. Platform
28644 Move JApplicationHelper::parseXMLInstallFile to JInstaller.

Platform

27267 Multiple Loggers fail when using formattedtext

Platform

28667 Update TinyMCE to version 3.5.2 Plugins
28566 Update TinyMCE 3.5.1.1 Plugins
28479 Use most specific paths possible. Fix detect FTP root. Plugins
28631 Bug in Codemirror plugin Plugins
28364 JImage wrong JPEG suppert detection in PHP 5.2 Plugins
27711 Plugin SEF don’t support “poster” video attribute Search Engine Friendly
28455 *303 when not using URL Language code in multilanguage Search Engine Friendly
25170 Content pictures aren’t displaying if SEF is on and System Cache plugin is enabled Search Engine Friendly
28382 Make Atomic work with sample data Templates
28603 User Registration Form: Label/Field Offset by one Line User Interface
28342 *New joomlaupdate component has no icon in admin menu + missing lang string User Interface

 

Joomla! Bug Squad

Thanks to the Joomla Bug Squad for their dedicated efforts investigating reports, fixing problems, and applying patches to Joomla. If you find a bug in Joomla, please report it on the Joomla! CMS Issue Tracker.

Active members of the Joomla Bug Squad during this last release cycle include: A Firoozmandan, Akarawuth Tamrareang, Andrea Tarr, Bill Richardson, Brian Teeman, Christophe Demko, Dennis Hermacki, Elin Waring, Emerson Rocha Luiz, Ernest E Vogelsinger, Harald Leithner, Herve Boinnard, Holger Brandt, Jacob Waisner, Jean-Claude Richard, Jean-Marie Simonet, Jeremy Wilken, Juan Antonio Ruzafa, Kevin Griffiths, Loyd Headrick, Marijke Stuivenberg, Mark Dexter, Matt Thomas, Michael Babker, Nicholas Dionysopoulos, Nick A., Nick Savov, Nikolai Plath, Ofer Cohen, Prasit Gebsaap, Rachmat Wakjaer, Radek Suski, Rob Clayburn, Rob Joyce, Roland Dalmulder, Rouven Weßling, Rune Sjøen, Shaun Maunder, Soheil Novinfard, Sudhi Seshachala, Troy Hall, Viet Vu.

Bug Squad Leadership: Mark Dexter, Coordinator; Elin Waring and Marijke Stuivenberg, Team Leaders.

Joomla! Security Strike Team

A big thanks to the Joomla! Security Strike Team for their ongoing work to keep Joomla secure. Members include: Airton Torres, Alan Langford, Bill Richardson, Elin Waring, Gary Brooks, Jason Kendall, Jean-Marie Simonet, Jeremy Wilken, Marijke Stuivenberg, Mark Dexter, Michael Babker, Rouven Weßling, Samuel Moffatt.


└ Tags: Project Release News
 Comment 

Providing the perl stack as RPMs

Jun14
by Ike on June 14, 2012 at 6:06 pm
Posted In: Apache, CMS, Community, cPanel, Events, Releases, security, System

The information in this post is about a project in motion. The final delivery may differ from what is discussed here, especially as we consider the feedback you have.

Our last article discussed changing from compile-on-demand to delivery of pre-compiled binary packages, using the RPM format. A primary driver behind this was our use of perl. To deliver perl via pre-built RPM packages required a number of changes to the product.

cPanel & WHM will no longer install perl from source. Rather pre-built RPMs will deliver perl and its dependencies.

Installation Layout

From an architectural standpoint we will treat /usr/local/cpanel/3rdparty as the root file system (/) for the purpose of third party applications. This means you will find a bin, lib, include and other standard directories therein.

There is some deviation in the directory organization. For example we have historically installed mailman to /usr/local/cpanel/3rdparty/mailman. These historical uses will remain for 11.34. In fact we build on that variation in order to support multiple versions of an application, or language, being installed simultaneously.

For 11.34 we will upgrade the external (more on that in a moment) perl from 5.8.8 to 5.14. It is installed to /usr/local/cpanel/3rdparty/perl/514. The executables are symlinked to /usr/local/cpanel/3rdparty/bin (e.g. /usr/local/cpanel/3rdparty/bin/perl).

Barring a few special circumstances all CPAN modules will be distributed as RPMs with cPanel & WHM. The checkperlmodules, and similar scripts, no longer exist. These modules likewise are all in /usr/local/cpanel/3rdparty.

Environment and Use

Most of the perl scripts we distribute with cPanel & WHM will have their shebangs adjusted to /usr/local/cpanel/3rdparty/bin/perl. This perl currently has the following include paths:

{!{code}!}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{!{/code}!}

(Substitute lib for lib64 on a 32-bit system.)

Note: I believe the /opt locations will change prior to shipping.

CPAN modules can be installed using /usr/local/cpanel/3rdparty/perl/514/bin/cpan (or /usr/local/cpanel/3rdparty/perl/514/bin/cpanm). These install to the @INC locations listed above.

Applications and scripts are free to use the cPanel-provided perl. To do this they will need to modify their shebang. If an application needs to support both 11.34 and older versions of cPanel & WHM, modifying the first line of your script to the following should ensure multi-version compatibility:

{!{code}!}czoxOTc6XCIjIS9iaW4vc2ggZXZhbCBcJ2lmIFsgLXggL3Vzci9sb2NhbC9jcGFuZWwvM3JkcGFydHkvYmluL3BlcmwgXTsgdGhlbiBle1smKiZdfXhlYyAvdXNyL2xvY2FsL2NwYW5lbC8zcmRwYXJ0eS9iaW4vcGVybCAteCAtLSAkMCAkezErXCIkQFwifTsgZWxzZSBleGVjIC91c3IvYntbJiomXX1pbi9wZXJsIC14ICQwICR7MStcIiRAXCJ9OyBmaTtcJwppZiAwOwojIS91c3IvYmluL3BlcmwKXCI7e1smKiZdfQ=={!{/code}!}

From the foregoing it should be apparent that beginning with 11.34 systems can have two or more of the following perl implementations present:

  • cPanel provided RPM
  • cPanel provided source install
  • OS Provided RPM

Fresh installs of 11.34 should only have two of the above. Upgrades from older versions of cPanel & WHM could have all three. We are leaving the existing source installed implementation in place after the upgrade so existing applications continue to function.

CPAN Modules

How do I install a CPAN module and have it be available for everything?

In particular, how do I install a CPAN module once and have it be usable by:

  • Applications used by cpsrvd
  • Command line scripts

This is really determined by the perl shebang used by the script or applications. The tools we provide to install CPAN modules, such as scripts/perlinstaller, have always installed the modules to /usr/lib or /usr/local/lib. These are the search paths normally used by the perl binary at /usr/bin/perl. This will not change.

Using the cpan and cpanm utilities provided by our RPM will install to a location outside of /usr/local/cpanel. These modules will not be overwritten or managed in any fashion by cPanel & WHM. If you want them updated, you will need to maintain them in your own fashion.

Given the above, if you want the experience of ‘install a CPAN module once, have it work every where’ then:

  • Change your shebang to /usr/local/cpanel/3rdparty/bin/perl
  • Use the cpan and cpanm utilities in /usr/local/cpanel/3rdparty/perl/514/bin/ to perform your installs.

What About the CPAN Installers in cPanel & WHM?

The cPanel interface has always installed to the user’s home directory. This behavior will not change in 11.34.

The WHM interface has always installed to the system location (/usr/lib or /usr/local/lib). This behavior will not change in 11.34.

What CPAN Modules Come as RPMs?

At the time of writing these are:

  • Acme-Bleach
  • Acme-Damn
  • Acme-Spork
  • Algorithm-Diff
  • Any-Moose
  • App-Cmd
  • AppConfig
  • App-cpanminus
  • App-Nopaste
  • App-perlbrew
  • Archive-Any
  • Archive-Extract
  • Archive-Tar
  • Archive-Tar-Streamed
  • Archive-Zip
  • Attribute-Handlers
  • Authen-Libwrap
  • Authen-SASL
  • autobox
  • autodie
  • AutoLoader
  • B-C
  • B-Debug
  • B-Flags
  • B-Hooks-EndOfScope
  • B-Hooks-OP-Check
  • B-Hooks-OP-PPAddr
  • bignum
  • B-Keywords
  • B-Lint
  • Browser-Open
  • BSD-Resource
  • Bundle-CPAN
  • Bundle-Interchange
  • Business-ISBN
  • Business-ISBN-Data
  • Business-OnlinePayment
  • Business-OnlinePayment-AuthorizeNet
  • Business-UPS
  • B-Utils
  • Cache-FastMmap
  • Capture-Tiny
  • Carp-Always
  • Carp-Assert
  • Carp-Assert-More
  • Carp-Clan
  • Catalyst-Action-RenderView
  • Catalyst-Action-REST
  • Catalyst-ActionRole-ACL
  • Catalyst-Authentication-Store-DBIx-Class
  • Catalyst-Component-InstancePerContext
  • Catalyst-Controller-ActionRole
  • Catalyst-Devel
  • Catalyst-Log-Logperl
  • Catalyst-Model-DBIC-Schema
  • Catalyst-Plugin-Authentication
  • Catalyst-Plugin-Authorization-Roles
  • Catalyst-Plugin-AutoCRUD
  • Catalyst-Plugin-Browser
  • Catalyst-Plugin-Cache
  • Catalyst-Plugin-Cache-FastMmap
  • Catalyst-Plugin-ConfigLoader
  • Catalyst-Plugin-HashedCookies
  • Catalyst-Plugin-Redirect
  • Catalyst-Plugin-Session
  • Catalyst-Plugin-Session-State-Cookie
  • Catalyst-Plugin-Session-Store-FastMmap
  • Catalyst-Plugin-StackTrace
  • Catalyst-Plugin-Static-Simple
  • Catalyst-Plugin-Unicode-Encoding
  • Catalyst-Plugin-UploadProgress
  • Catalyst-Runtime
  • Catalyst-TraitFor-Request-BrowserDetect
  • Catalyst-View-JSON
  • Catalyst-View-TT
  • CatalystX-Component-Traits
  • CatalystX-RoleApplicator
  • CDB_File
  • CGI-FormBuilder
  • CGI-FormBuilder-Source-Perl
  • CGIpm
  • CGI-Session
  • CGI-Simple
  • CHI
  • Class-Accessor
  • Class-Accessor-Chained
  • Class-Accessor-Grouped
  • Class-Base
  • Class-C
  • Class-C-Adopt-NEXT
  • Class-C-Componentised
  • Class-Data-Inheritable
  • Class-ErrorHandler
  • Class-Factory-Util
  • Class-Inner
  • Class-Inspector
  • Class-Load
  • Class-Loader
  • Class-Load-XS
  • Class-MakeMethods
  • Class-MethodMaker
  • Class-Method-Modifiers
  • Class-Singleton
  • Class-Std
  • Class-Std-Utils
  • Class-Unload
  • Class-XSAccessor
  • Clipboard
  • Clone
  • common-sense
  • Compress-Bzip
  • Compress-Raw-Bzip
  • Compress-Raw-Zlib
  • Config-Any
  • Config-Crontab
  • Config-General
  • Config-GitLike
  • Config-INI
  • Config-MVP
  • Config-MVP-Reader-INI
  • Config-Tiny
  • constant
  • Context-Preserve
  • Convert-ASCII-Armour
  • Convert-ASN
  • Convert-BinHex
  • Convert-PEM
  • CPAN
  • CPAN-DistnameInfo
  • Cpanel-Class
  • Cpanel-Cleanup
  • cPanel-MemTest
  • cPanel-SyncUtil
  • Cpanel-TaskQueue
  • CPAN-Meta
  • CPAN-Meta-YAML
  • CPAN-Perl-Releases
  • CPANPLUS
  • CPANPLUS-Dist-Build
  • CPAN-SQLite
  • CPAN-Uploader
  • Crypt-Blowfish
  • Crypt-CAST_PP
  • Crypt-CBC
  • Crypt-DES
  • Crypt-DES_EDE
  • Crypt-DSA
  • Crypt-GPG
  • Crypt-IDEA
  • Crypt-OpenPGP
  • Crypt-OpenSSL-Bignum
  • Crypt-OpenSSL-DSA
  • Crypt-OpenSSL-Random
  • Crypt-OpenSSL-RSA
  • Crypt-Passwd-XS
  • Crypt-Primes
  • Crypt-Random
  • Crypt-RC
  • Crypt-Rijndael
  • Crypt-RIPEMD
  • Crypt-RSA
  • Crypt-SSLeay
  • Crypt-Twofish
  • Curses
  • Curses-UI
  • Danga-Socket
  • Data-Buffer
  • Data-Compare
  • Data-Dump
  • Data-Dumper
  • Data-Dumper-Concise
  • Data-Dump-Streamer
  • Data-OptList
  • Data-Page
  • Data-Section
  • Data-Serializer
  • Data-UUID
  • Data-Visitor
  • Date-Simple
  • DateTime
  • DateTime-Format-Builder
  • DateTime-Format-Mail
  • DateTime-Format-Pg
  • DateTime-Format-Strptime
  • DateTime-Format-WCDTF
  • DateTime-Locale
  • DateTime-TimeZone
  • DateTime-Tiny
  • Date-Tiny
  • DBD-Mock
  • DBD-mysql
  • DBD-Pg
  • DBD-SQLite
  • DBD-SQLite
  • DB_File
  • DBI
  • DBIx-Class
  • DBIx-Class-Schema-Loader
  • DBIx-MyParsePP
  • Devel-Caller
  • Devel-Cover
  • Devel-Cycle
  • Devel-Declare
  • Devel-GlobalDestruction
  • Devel-Hide
  • Devel-LexAlias
  • Devel-NYTProf
  • Devel-PartialDump
  • Devel-PatchPerl
  • Devel-PPPort
  • Devel-REPL
  • Devel-Size
  • Devel-StackTrace
  • Devel-StackTrace-AsHTML
  • Devel-Symdump
  • Diff-LibXDiff
  • Digest
  • Digest-BubbleBabble
  • Digest-HMAC
  • Digest-JHash
  • Digest-MD
  • Digest-MD
  • Digest-MD-File
  • Digest-Perl-MD
  • Digest-SHA
  • Digest-SHA
  • Dist-CheckConflicts
  • Dist-Zilla
  • Dist-Zilla-Plugin-Git
  • Dist-Zilla-Plugin-GitHub
  • dualcore-metacpnoarch
  • Email-Abstract
  • Email-Address
  • Email-Date-Format
  • Email-MessageID
  • Email-MIME
  • Email-MIME-ContentType
  • Email-MIME-Encodings
  • Email-MIME-Kit
  • Email-Sender
  • Email-Simple
  • Email-Valid
  • Encode
  • Encode-Detect
  • Encode-Locale
  • encoding-warnings
  • Env
  • Error
  • Eval-Closure
  • Exception-Class
  • Expect
  • Exporter
  • Exporter-Declare
  • Exporter-Lite
  • ExtUtils-CBuilder
  • ExtUtils-Command
  • ExtUtils-Constant
  • ExtUtils-Depends
  • ExtUtils-Install
  • ExtUtils-MakeMaker
  • ExtUtils-Manifest
  • ExtUtils-ParseXS
  • File-BaseDir
  • File-ChangeNotify
  • File-chdir
  • File-Comments
  • File-Copy-Recursive
  • File-DesktopEntry
  • File-Fetch
  • File-Find-Rule
  • File-Find-Rule-Filesys-Virtual
  • File-Find-Rule-Perl
  • File-HomeDir
  • File-Listing
  • File-MimeInfo
  • File-MMagic
  • File-MMagic-XS
  • File-Next
  • File-Path
  • File-Path-Tiny
  • File-pushd
  • File-Remove
  • File-ShareDir
  • File-ShareDir-Install
  • File-Slurp
  • Filesys-Df
  • Filesys-Notify-Simple
  • Filesys-Statvfs
  • Filesys-Virtual
  • File-Tail
  • File-Temp
  • File-Touch
  • File-Which
  • Filter
  • Filter-Simple
  • forks
  • GD
  • GDGraph
  • GDTextUtil
  • Gearman
  • Geography-Countries
  • Geo-IPfree
  • Getopt-Euclid
  • Getopt-Long
  • Getopt-Long-Descriptive
  • Getopt-Param
  • Getopt-Param-Tiny
  • Git-Repository
  • Git-Wrapper
  • Graph-Easy
  • Graph-Easy-As_svg
  • Graph-Easy-Manual
  • Graph-Flowchart
  • GSSAPI
  • Hash-Merge
  • Hash-Merge-Simple
  • Hash-MoreUtils
  • Hash-MultiValue
  • Hash-Util-FieldHash-Compat
  • Hook-LexWrap
  • HTML-Form
  • HTML-Parser
  • HTML-StripTags
  • HTML-Tagset
  • HTML-Template
  • HTML-Tree
  • HTTP-Body
  • HTTP-BrowserDetect
  • HTTP-Cookies
  • HTTP-Daemon
  • HTTP-Daemon-App
  • HTTP-Daemon-SSL
  • HTTP-Date
  • HTTP-Lite
  • HTTP-Message
  • HTTP-Negotiate
  • HTTP-Parser-XS
  • HTTP-Request-AsCGI
  • HTTP-Server-Simple
  • HTTP-Tiny
  • Image-Base
  • Image-Info
  • Image-Size
  • Image-Xbm
  • Image-Xpm
  • IO
  • IO-AIO
  • IO-All
  • IO-Compress
  • IO-Interactive
  • IO-Interactive-Tiny
  • IO-Interface
  • IO-Prompt
  • IO-Socket-ByteCounter
  • IO-Socket-INET
  • IO-Socket-SSL
  • IO-String
  • IO-stringy
  • IO-TieCombine
  • IO-Tty
  • IO-Zlib
  • IPC-Cmd
  • IP-Country
  • IPC-Pipeline
  • IPC-Run
  • IPC-Run
  • IPC-SysV
  • JSON
  • JSON-Any
  • JSON-XS
  • Lchown
  • Lexical-Persistence
  • libnet
  • lib-restrict
  • libwww-perl
  • libxml-perl
  • Lingua-EN-Inflect
  • Lingua-EN-Inflect-Number
  • Lingua-EN-Inflect-Phrase
  • Lingua-EN-Tagger
  • Lingua-PT-Stemmer
  • Lingua-Stem
  • Lingua-Stem-Fr
  • Lingua-Stem-It
  • Lingua-Stem-Ru
  • Lingua-Stem-Snowball-Da
  • Linux-Inotify
  • List-Cycle
  • List-MoreUtils
  • Locale-Codes
  • Locale-Maketext
  • Locale-Maketext-Pseudo
  • Locale-Maketext-Simple
  • Locales
  • local-lib
  • Log-Any
  • Log-Contextual
  • Log-Dispatch
  • Log-Dispatch-Array
  • Log-Dispatch-Config
  • Log-Dispatchouli
  • Log-Logperl
  • Log-Message
  • Log-Message-Simple
  • LWP-MediaTypes
  • LWP-Protocol-https
  • Mail-Alias-Reader
  • Mail-DKIM
  • Mail-DomainKeys
  • Mail-SendEasy
  • Mail-Sender
  • Mail-Sender-Easy
  • Mail-SpamAssassin
  • Mail-SPF
  • Mail-SRS
  • MailTools
  • Math-Base
  • Math-BigInt
  • Math-BigInt-FastCalc
  • Math-BigInt-GMP
  • Math-BigInt-Pari
  • Math-BigRat
  • Math-Complex
  • Math-Fibonacci
  • Math-Fibonacci-Phi
  • Math-Pari
  • Math-Round
  • MD
  • Memoize
  • Memoize-ExpireLRU
  • Meta-Builder
  • MIME-Base
  • MIME-Base
  • MIME-Lite
  • MIME-Types
  • Mixin-Linewise
  • MLDBM
  • Modern-Perl
  • Module-Build
  • Module-CoreList
  • Module-Extract-VERSION
  • Module-Find
  • Module-Implementation
  • Module-Install
  • Module-Load
  • Module-Load-Conditional
  • Module-Loaded
  • Module-Metadata
  • Module-Pluggable
  • Module-Refresh
  • Module-Runtime
  • Module-ScanDeps
  • Module-Signature
  • Module-Want
  • Moo
  • Moose
  • Moose-Autobox
  • MooseX-App-Cmd
  • MooseX-AttributeHelpers
  • MooseX-AttributeShortcuts
  • MooseX-ClassAttribute
  • MooseX-Clone
  • MooseX-ConfigFromFile
  • MooseX-Daemonize
  • MooseX-Declare
  • MooseX-Emulate-Class-Accessor-Fast
  • MooseX-Getopt
  • MooseX-GlobRef
  • MooseX-Has-Sugar
  • MooseX-InsideOut
  • MooseX-Iterator
  • MooseX-LazyLogDispatch
  • MooseX-LazyRequire
  • MooseX-LogDispatch
  • MooseX-Log-Logperl
  • MooseX-Meta-TypeConstraint-ForceCoercion
  • MooseX-MethodAttributes
  • MooseX-Method-Signatures
  • MooseX-NonMoose
  • MooseX-Object-Pluggable
  • MooseX-OneArgNew
  • MooseX-Param
  • MooseX-Params-Validate
  • MooseX-POE
  • MooseX-RelatedClassRoles
  • MooseX-Role-Cmd
  • MooseX-Role-Parameterized
  • MooseX-Role-TraitConstructor
  • MooseX-Role-WithOverloading
  • MooseX-SemiAffordanceAccessor
  • MooseX-SetOnce
  • MooseX-SimpleConfig
  • MooseX-Singleton
  • MooseX-Storage
  • MooseX-StrictConstructor
  • MooseX-Traits
  • MooseX-Traits-Pluggable
  • MooseX-Types
  • MooseX-Types-Common
  • MooseX-Types-DateTime
  • MooseX-Types-LoadableClass
  • MooseX-Types-Path-Class
  • MooseX-Types-Perl
  • MooseX-Types-Set-Object
  • MooseX-Types-Structured
  • MooseX-Workers
  • Mozilla-CA
  • MRO-Compat
  • namespace-autoclean
  • namespace-clean
  • NetAddr-IP
  • Net-AIM
  • Net-CIDR
  • Net-Daemon
  • Net-Daemon-SSL
  • Net-DAV-Server
  • Net-DNS
  • Net-DNS-SEC
  • Net-FTPSSL
  • Net-HTTP
  • Net-HTTPS-Any
  • Net-Ident
  • Net-IP
  • Net-IP-Match-Regexp
  • Net-IPvAddr
  • Net-Jabber
  • Net-Jabber-Bot
  • Net-LDAP-Server
  • Net-LibIDN
  • Net-OpenSSH
  • Net-OSCAR
  • Net-Ping
  • Net-Server
  • Net-SFTP-Foreign
  • Net-SNMP
  • Net-SOCKS
  • Net-SSLeay
  • Net-TCPwrappers
  • Net-Telnet
  • Net-XMPP
  • NEXT
  • Number-Compare
  • Object-Accessor
  • Object-Signature
  • OLE-Storage_Lite
  • Opcodes
  • Package-Constants
  • Package-DeprecationManager
  • Package-Stash
  • Package-Stash-XS
  • PadWalker
  • Params-Check
  • Params-Util
  • Params-Validate
  • PAR-Dist
  • parent
  • Parse-CPAN-Meta
  • Parse-Method-Signatures
  • Parse-RecDescent
  • Path-Class
  • Path-Iter
  • PathTools
  • Perlbal
  • Perl-Critic
  • PerlIO-via-QuotedPrint
  • Perl-Junction
  • perl-ldap
  • Perl-MinimumVersion
  • Perl-OSType
  • Perl-PrereqScanner
  • Perl-Tidy
  • Perl-Version
  • Plack
  • Plack-Middleware-ReverseProxy
  • Plack-Test-ExternalServer
  • Pod-Coverage
  • Pod-Coverage-Moose
  • Pod-Escapes
  • Pod-Eventual
  • Pod-LaTeX
  • podlators
  • Pod-Parser
  • Pod-Perldoc
  • Pod-Readme
  • Pod-Simple
  • Pod-Spell
  • POE
  • POE-Test-Loops
  • PPI
  • PPIx-Regexp
  • PPIx-Utilities
  • Pristine-Tar
  • Probe-Perl
  • Proc-Daemon
  • Proc-ProcessTable
  • Quota
  • Readonly
  • Readonly-XS
  • Regexp-Common
  • Regexp-Parser
  • REST-Google
  • REST-Google-Translate
  • Role-HasMessage
  • Role-Identifiable
  • RRDs
  • Safe
  • Safe-Hole
  • Scalar-List-Utils
  • Scope-Guard
  • Scope-Upper
  • SelfLoader
  • Set-Crontab
  • Set-Object
  • Shell
  • Smart-Comments
  • Snowball-Norwegian
  • Snowball-Swedish
  • SOAP-Lite
  • Socket
  • Software-License
  • Sort-Versions
  • Spreadsheet-ParseExcel
  • Spreadsheet-ParseExcel-Simple
  • Spreadsheet-WriteExcel
  • Spreadsheet-WriteExcel-Simple
  • SQL-Abstract
  • SQL-Statement
  • SQL-Translator
  • Starman
  • Storable
  • strictures
  • String-BOM
  • String-CamelCase
  • String-CRC
  • String-Errf
  • String-Flogger
  • String-Format
  • String-Formatter
  • String-RewritePrefix
  • String-ToIdentifier-EN
  • String-Unquotemeta
  • Sub-Exporter
  • Sub-Exporter-ForMethods
  • Sub-Exporter-GlobExporter
  • Sub-Install
  • Sub-Name
  • Sub-Uplevel
  • SVG-TT-Graph
  • Sysadm-Install
  • Sys-Hostname-Long
  • Sys-Mmap
  • Sys-SigAction
  • Sys-Syscall
  • Sys-Syslog
  • System-Command
  • Task-Cpanel-Catalyst
  • Task-Cpanel-Core
  • Task-Cpanel-EA
  • Task-Cpanel-Internal
  • Task-Cpanel-Kensho
  • Task-Cpanel-rdparty
  • Task-Weaken
  • Template-Timer
  • Template-Toolkit
  • Term-ANSIColor
  • Term-Cap
  • Term-ProgressBar
  • Term-ProgressBar-Quiet
  • Term-ProgressBar-Simple
  • TermReadKey
  • Term-UI
  • Test
  • Test-Carp
  • Test-Class
  • Test-CPAN-Meta
  • Test-CPAN-Meta-YAML
  • Test-Deep
  • Test-Differences
  • Test-Exception
  • Test-File-Contents
  • Test-Harness
  • Test-LongString
  • Test-Manifest
  • Test-Memory-Cycle
  • Test-MinimumVersion
  • Test-Mock-Cmd
  • Test-MockModule
  • Test-MockObject
  • Test-Most
  • Test-NoWarnings
  • Test-Object
  • Test-Output
  • Test-Pod
  • Test-Pod-Coverage
  • Test-Script
  • Test-SharedFork
  • Test-Simple
  • Test-SubCalls
  • Test-TCP
  • Test-Tester
  • Test-Unit
  • Test-use-ok
  • Test-Warn
  • Test-WWW-Mechanize
  • Test-YAML-Meta
  • Test-YAML-Valid
  • Text-Balanced
  • Text-CSV
  • Text-CSV_XS
  • Text-Diff
  • Text-Extract-MaketextCallPhrases
  • Text-Fold
  • Text-German
  • Text-Glob
  • Text-Iconv
  • Text-ParseWords
  • Text-SimpleTable
  • Text-Soundex
  • Text-Tabs+Wrap
  • Text-Template
  • Text-Trim
  • Text-Unidecode
  • Thread-Queue
  • Thread-Semaphore
  • Throwable
  • Tie-DBI
  • Tie-EncryptedHash
  • Tie-File
  • Tie-IxHash
  • Tie-RefHash
  • Tie-ShadowHash
  • Tie-ToObject
  • TimeDate
  • Time-Duration
  • Time-Duration-Parse
  • Time-HiRes
  • Time-Local
  • Time-modules
  • Time-Piece
  • Time-Tiny
  • Tree-DAG_Node
  • Tree-MultiNode
  • Tree-Simple
  • Tree-Simple-VisitorFactory
  • TryCatch
  • Try-Tiny
  • Unicode-Collate
  • Unicode-Normalize
  • UNIVERSAL-can
  • UNIVERSAL-isa
  • Unix-PID
  • Unix-PID-Tiny
  • Unix-Syslog
  • URI
  • URI-Find
  • Variable-Magic
  • version
  • Version-Next
  • Version-Requirements
  • Want
  • WWW-Form
  • WWW-Mechanize
  • WWW-Mechanize-TreeBuilder
  • WWW-Pastebin-PastebinCom-Create
  • WWW-RobotRules
  • XML-Atom
  • XML-DOM
  • XML-Filter-BufferText
  • XML-Generator-PerlData
  • XML-LibXML
  • XML-NamespaceSupport
  • XML-Parser
  • XML-RegExp
  • XML-RSS
  • XML-SAX
  • XML-SAX-Base
  • XML-SAX-Expat
  • XML-SAX-Writer
  • XML-Simple
  • XML-Stream
  • XML-Writer
  • XML-XPath
  • XSLoader
  • YAML
  • YAML-LibYAML
  • YAML-Syck
  • YAML-Tiny

If there is something you want added to the list, please let us know.

Versions of perl

Earlier I referred to the perl delivered by our RPM as ‘external.’ What does this mean?

In the context of cPanel & WHM there are two types of perl: external and internal. The external version is used by non-compiled scripts and applications. For example scripts/upcp uses the external version.

The internal version is used by compiled code. This is limited to perl 5.6.2 and the modules installed to /usr/local/cpanel/perl. The long term goal is to switch the compiled version to use the same perl version as non-compiled code. That was not attainable for this release.

The distinction between internal versus external is only of relevance if you are developing, or deploying, perl applications that will be called directly by our compiled code.

More

This is the second article in our series on migrating to pre-built RPMs. Other articles, written and pending are:

  • Switching from compile-on-demand to binary packages
  • Improving the internal PHP
  • rpm.versions system
  • Changes to how cPanel & WHM are updated to make it more robust

Discuss this article on our forum.

└ Tags: code, cpan, cPanel, directory
 Comment 
  • Page 2,882 of 2,983
  • « First
  • «
  • 2,880
  • 2,881
  • 2,882
  • 2,883
  • 2,884
  • »
  • Last »

What’s New?

  • Fedora 42 pgadmin4 Critical Remote Code Exec Fix 2025-b08763f674
  • Fedora: Gobuster Critical Update Released for CVE-2025-58188 Advisory
  • Debian: Rails Severe Command Manipulation DSA-6090-2 CVE-2025-24294
  • Debian Trixie WordPress Security Advisory DSA-6091-1 for CVE-2025-58246
  • Fedora 42: uriparser CVE-2025-67899 Fix for Unbounded Recursion Issue
  • Fedora 42: util-linux Critical Buffer Overflow CVE-2025-14104 Advisory
  • Fedora 42: mqttcli Update 0.2.8 Critical Integer Overflow Issues
  • Fedora 42: Chromium High CVE-2025-14765 Out of Bounds Security Risks
  • Debian: Roundcube Important XSS and Information Leak Fix DSA-6087-1
  • Debian: MediaWiki DSA-6085-1 Security Updates for DoS and XSS
  • Debian: Urgent Vulnerability in Dropbear DSA-6086-1 CVE-2025-14282
  • Plesk 2025: A Year in Review
  • Ubuntu 24.04: Linux Xilinx Important Kernel Security Fix USN-7931-4
  • Ubuntu 22.04 LTS: Linux Kernel Critical Fix for Raspberry Pi USN-7928-4
  • Ubuntu 18.04 LTS – Oracle Kernel Critical Security Flaws USN-7922-3
  • Ubuntu 24.04: Advisory USN-7921-2 for Real-time Kernel CVE-2025-39946
  • Debian Trixie: c-ares Critical Denial of Service Advisory DSA-6084-1
  • Debian: webkit2gtk Important Memory Corruption Issues DSA-6083-1
  • Fedora 42: brotli 1.2.0 Critical DoS Fix FEDORA-2025-9e233a4e22
  • Fedora 42: perl-Alien-Brotli Faces Critical Denial-of-Service Risk
  • Fedora 42: CUPS Critical Local DoS Issue FEDORA-2025-c09b980696
  • Fedora 42: Security Advisory for golang-github-facebook-time CVE-2025-65637
  • Ubuntu 24.04: Linux Kernel Azure FIPS Critical Info Exposure CVE-2025-40300
  • Fedora 43: assimp Library Critical CVE-2025-11277 Update
  • Fedora 43: util-linux Update 2.41.4 Urgent CVE-2025-14105

Search

Translator

Tags

Business and industry code Community cPanel CVE Debian Debian Linux Distribution - Security Advisories Development Events Fedora Fedora Linux Distribution - Security Advisories General Hosting Important Advisory Linux Moderate Advisory Month in WordPress news Parallels Plesk Parallels Plesk Panel Performance PHP Plesk news and announcements Plesk Panel Podcast ProdDevSec Product and technology Products Project Release News Red Hat Red Hat Linux Distribution - Security Advisories Releases security Security Centre sensitive site Ubuntu Ubuntu Linux Distribution - Security Advisories update updates Various vulnerability Web Server Survey Wordpress wp-briefing

Posts

Helpful Links

  • Liquidweb.com
  • MYSQL Dev Documentation
  • Plugins
  • Source forge SED command
  • Themes
  • WordPress Documentation
  • You Tube
December 2025
M T W T F S S
« Nov    
1234567
891011121314
15161718192021
22232425262728
293031  
  • Google
  • Yahoo
  • Liquid Web
  • Storm
  • YouTube

©1999-2025 Ike.ninja | Powered by WordPress with Easel | Subscribe: RSS | Back to Top ↑

50 queries. 9 mb Memory usage. 0.310 seconds.