Ability for customers to edit php.ini was the most requested feature since we released PHP Selector, and today it is available from our beta repository.
New PHP Selector comes as an updated LVE Manager 0.6 & CageFS 4.0-14 with following changes:
PHP Selector: Ability for customer to edit php.ini settings
PHP Selector: added ability to switch PHP versions when using Litespeed Web Server
Kernel 2.6.32-379.22.1.lve1.2.14.el6 has been moved to production.This kernel resolves the issue with R1soft introduced in lve1.2.7 kernel, and has following changes and fixes:
Rebase to
Fix for sda is xvda for hybrid Xen servers
Ability to from end users
SecureLinks:: add possibility to deny group > symlinkown_gid []
bugfix: xsave remove thread_has_fpu() bug check in __sanitize_i387_state()
bugfix: SecureLinks owner patch fix, work around for new Freeze feature
bugfix: perform iolimit sleep outside i_mutex-ed area
bugfix: iolimits - don't sleep while in journal section
To update CL6 servers:
$ yum install kernel-2.6.32-379.22.1.lve1.2.14.el6
To update hybrid servers:
$ yum install kernel-2.6.32-379.22.1.lve1.2.14.1.el5h
The updates for alt-php used by PHP Selector had been moved to production repository. PHP 5.5, 5.4 & 5.3 were updated. ffmpeg-php was ported to compile on latest versions of CloudLinux.
Change Log:
Version PHP 5.5.0 Alpha 5
- Core:
. Implemented FR #64175 (Added HTTP codes as of RFC 6585). (Jonh Wendell)
. Fixed bug #64135 (Exceptions from set_error_handler are not always
propagated). (Laruence)
. Fixed bug #63830 (Segfault on undefined function call in nested generator).
(Nikita Popov)
. Fixed bug #60833 (self, parent, static behave inconsistently
case-sensitive). (Stas, mario at include-once dot org)
. Implemented FR #60524 (specify temp dir by php.ini). (ALeX Kazik).
. Fixed bug #64142 (dval to lval different behavior on ppc64). (Remi)
. Added ARMv7/v8 versions of various Zend arithmetic functions that are
implemented using inline assembler (Ard Biesheuvel)
- CLI server:
. Fixed bug #64128 (buit-in web server is broken on ppc64). (Remi)
- Intl:
. Cherry-picked UConverter wrapper, which had accidentaly been committed only
to master.
- mysqli
. Added mysqli_begin_transaction()/mysqli::begin_transaction(). Implemented all
options, per MySQL 5.6, which can be used with START TRANSACTION, COMMIT
and ROLLBACK through options to mysqli_commit()/mysqli_rollback() and their
respective OO counterparts. They work in libmysql and mysqlnd mode. (Andrey)
. Added mysqli_savepoint(), mysqli_release_savepoint(). (Andrey)
- mysqlnd
. Add new begin_transaction() call to the connection object. Implemented all
options, per MySQL 5.6, which can be used with START TRANSACTION, COMMIT
and ROLLBACK. (Andrey)
. Added mysqlnd_savepoint(), mysqlnd_release_savepoint(). (Andrey)
- Sockets:
. Added recvmsg() and sendmsg() wrappers. (Gustavo)
See
New beta kernel for CL6 is available. The kernel fixes sda is xvda mapping for hybrid Xen systems and provides rebase to latest stable upstream kernel.
Changelog:
Fix for sda is xvda for hybrid Xen servers
Rebase to
To update CL6 servers:
$ yum install kernel-2.6.32-379.22.1.lve1.2.14.el6 --enablerepo=cloudlinux-updates-testing
To update hybrid servers:
$ yum install kernel-2.6.32-379.22.1.lve1.2.14.1.el5h --enablerepo=cloudlinux-hybrid-testing
We have released updates for PHP packages used by PHP Selector. PHP 5.5, 5.4 & 5.3 were updated. ffmpeg-php was ported to compile on latest versions of CloudLinux.
Change Log:
Version PHP 5.5.0 Alpha 5
- Core:
. Implemented FR #64175 (Added HTTP codes as of RFC 6585). (Jonh Wendell)
. Fixed bug #64135 (Exceptions from set_error_handler are not always
propagated). (Laruence)
. Fixed bug #63830 (Segfault on undefined function call in nested generator).
(Nikita Popov)
. Fixed bug #60833 (self, parent, static behave inconsistently
case-sensitive). (Stas, mario at include-once dot org)
. Implemented FR #60524 (specify temp dir by php.ini). (ALeX Kazik).
. Fixed bug #64142 (dval to lval different behavior on ppc64). (Remi)
. Added ARMv7/v8 versions of various Zend arithmetic functions that are
implemented using inline assembler (Ard Biesheuvel)
- CLI server:
. Fixed bug #64128 (buit-in web server is broken on ppc64). (Remi)
- Intl:
. Cherry-picked UConverter wrapper, which had accidentaly been committed only
to master.
- mysqli
. Added mysqli_begin_transaction()/mysqli::begin_transaction(). Implemented all
options, per MySQL 5.6, which can be used with START TRANSACTION, COMMIT
and ROLLBACK through options to mysqli_commit()/mysqli_rollback() and their
respective OO counterparts. They work in libmysql and mysqlnd mode. (Andrey)
. Added mysqli_savepoint(), mysqli_release_savepoint(). (Andrey)
- mysqlnd
. Add new begin_transaction() call to the connection object. Implemented all
options, per MySQL 5.6, which can be used with START TRANSACTION, COMMIT
and ROLLBACK. (Andrey)
. Added mysqlnd_savepoint(), mysqlnd_release_savepoint(). (Andrey)
- Sockets:
. Added recvmsg() and sendmsg() wrappers. (Gustavo)
See
Many of you are aware of SSHD exploit going around hosting comunity. It seems to affect servers running CloudLinux, CentOS & cPanel.
There are also reports of DirectAdmin, Plesk & non-RHEL based distributions being affected.
Detailed discussion can be found here:
We believe the exploit is done via SSH server.
So far we know:
Rootkit deposits files /lib64/libkeyutils.so.1.9 on 64bit systems and /lib/libkeyutils.so.1.9 on 32bit systems
It changes link: /lib64/libkeyutils.so.1 (and /lib/libkeyutils.so.1) to point to that library.
We believe this library is:
stealing passwords, ssh keys & /etc/shadow from the system
used as a backdoor to access server at any time
send spam
We have seen the change in the payload over time. Hacker has full root access, and can do absolutely anything with the server.
We have noticed that once cleaned up, servers often get re-infected.
You can see if your server is infected by running:
$ wget -qq -O - |/bin/bash
To clean up libkeyutils library.
USE IT AT YOUR OWN RISK, THE SCRIPT WASN'T FULLY TESTED $ wget -qq -O - |/bin/bash
and reboot the server.
To protect against being re-infected again we recommend completely firewalling SSH from internet, allowing access only from your IP. Change your passwords for SSH, WHM and any other admin passwords you are using on that server.
We have updated MySQL Governor and lve-stats to improve compatibility with cPanel 11.36 and make sure that MySQL related data in lve-stats database gets compacted and doesn't grow indefinitely.
db-governor 0.9-6 changelog:
Added cPanel 11.36 support and added MYSQLUP=never adding in cpanel's config file for correct update from 11.34 to 11.36
Fixed bug in mysqldisabler script on cPanel (<11.36)
New beta kernel fixes a rare bug in memory subsystem that was affecting all CloudLinux kernel versions starting with lve1.1.9. The bug can cause kernel panic affected kernels.
The kernel is based on kernel.
To update CL6 servers:
# yum install kernel-2.6.32-379.19.1.lve1.2.7.el6 --enablerepo=cloudlinux-updates-testing
To update hybrid servers:
# yum install kernel-2.6.32-379.19.1.lve1.2.7.el5h --enablerepo=cloudlinux-hybrid-testing
Several updates available for alt-php from beta repository
alt-php55: 1. update to 5.5.0alpha4
Changelog:
- Core:
. Fixed bug #63980 (object members get trimmed by zero bytes). (Laruence)
. Implemented RFC for Class Name Resolution As Scalar Via "class" Keyword.
(Ralph Schindler, Nikita Popov, Lars)
- DateTime
. Added DateTimeImmutable - a variant of DateTime that only returns the
modified state instead of changing itself. (Derick)
- FPM:
. Fixed bug #63999 (php with fpm fails to build on Solaris 10 or 11). (Adam)
- pgsql:
. Bug #46408: Locale number format settings can cause pg_query_params to
break with numerics. (asmecher, Lars)
- dba:
. Bug #62489: dba_insert not working as expected.
(marc-bennewitz at arcor dot de, Lars)
- Reflection:
. Fixed bug #64007 (There is an ability to create instance of Generator by hand).
(Laruence)
2. fix mysql/mysqli bug
3. add pear/pecl support alt-php-pecl-ext (52, 53, 54, 55):
1. add memcached extension ver 2.1.0
Description: This extension uses libmemcached library to provide API for communicating with memcached servers.
