Ike.ninja

The following vulnerabilities have been fixed:

PMASA-2011-5 Possible session manipulation in Swekey authentication
http://www.phpmyadmin.net/home_page/security/PMASA-2011-5.php

PMASA-2011-6 Possible code injection in setup script in case session variables are compromised
http://www.phpmyadmin.net/home_page/security/PMASA-2011-6.php

PMASA-2011-7 Regular expression quoting issue in Synchronize code
http://www.phpmyadmin.net/home_page/security/PMASA-2011-7.php

PMASA-2011-8 Possible directory traversal
http://www.phpmyadmin.net/home_page/security/PMASA-2011-8.php

[releasenotice] Plesk Panel 9.3.0 MU#10 for Linux – security fixes – is available since June 22, 2011 through the Autoinstaller
[-] Horde XSS injection
[-] Multiple XSS vulnerabilities in Plesk Panel

Plesk Panel 10.1.1 MU#15 for Linux and Windows – security fixes – is available since June 9, 2011 through the Autoinstaller
[-] phpMyAdmin XSS vulnerability http://www.securityfocus.com/bid/47945/info.
[-] SQL injection at subscription’s owner changing in Plesk Panel.
[-] Horde XSS injection.
[-] Multiple XSS vulnerabilities in Plesk Panel.
[-] sw-cp-server can be crashed by client certificate.

Parallels Plesk Panel 9.3 for Linux is now available for downloads.
This release delivers web server improvement, CentOS 5.4 support, and bugfixes related to mail functionality.

Change log:
1. [+] Apache port change – you can change Apache web server port to use a lightweight high-performance web server, such as nginx, as a front-end web server, and move Apache web server to back-end.
2. [-] Certificates from repository of domain set on exclusive IP address are reset when domain backup is restored bug is fixed.
3. [-] Applications link appearing in the left frame for domain administrator’s main menu when it is not supported by license bug is fixed.
4. [-] Enabled mail greylisting loads server’s CPU/memory hard bug is fixed.
5. [-] Applying pattern not listed in greylisting configuration bug is fixed.
6. [-] Timeout in postfix-queue prohibiting to send messages with big attachments from Parallels Plesk Panel server bug is fixed.
7. [-] Syntax error in backup-unpack bug is fixed.
8. [-] If a message cannot be sent, sender receives a message with invalid field from=#@[] bug is fixed.
9. [-] Installation on CentOS 5.4 failed bug is fixed.