ISPConfig 3.0.5.3 is available for download. This release is a bugfix release for ISPConfig 3.0.5 and contains a important security patch. It is highly recommended to install this update. Please see security advisory for details: http://www.ispconfig.org/dev/ispconfig-3-security-advisory-20130808/ For a detailed list of changes, please see the changelog section below. ===================================================== *** New! The ISPConfig 3 manual for ISPConfig 3.0.5 is now available! *** Version 1.4 for ISPConfig >= 3.0.5 (Date: 02/22/2013) Author: Falko Timme <[email protected]> 373 pages The manual can be downloaded from these two links: http://www.ispconfig.org/ispconfig-3/ispconfig-3-manual/ http://www.howtoforge.com/download-the-ispconfig-3-manual ===================================================== ----------------------------------------------------- - Download ----------------------------------------------------- The software can be downloaded here: http://prdownloads.sourceforge.net/ispconfig/ISPConfig-3.0.5.3.tar.gz ------------------------------------ - Changelog ------------------------------------ http://bugtracker.ispconfig.org/index.php?do=index&tasks=&project=3&due=76&status[]= -------------------------------------- - Known Issues: -------------------------------------- Please take a look at the bugtracker: http://bugtracker.ispconfig.org -------------------------------------- - BUG Reporting -------------------------------------- Please report bugs to the ISPConfig bugtracking system: http://bugtracker.ispconfig.org ---------------------------------------- - Supported Linux Distributions ---------------------------------------- - Debian Etch (4.0) - Wheezy (7.0) and Debian testing - Ubuntu 7.10 - 13.04 - OpenSuSE 11 - 12.2 - CentOS 5.2 - 6.4 - Fedora 9 - 15 ----------------------------------------- - Installation ----------------------------------------- The installation instructions for ISPConfig can be found here: http://www.ispconfig.org/ispconfig-3/documentation/ or in the text files (named INSTALL_*.txt) which are inside the docs folder of the .tar.gz file. ------------------------------------------ - Update ------------------------------------------ To update existing ISPConfig 3 installations, run this command on the shell: ispconfig_update.sh Select "stable" as the update resource. The script will check if an updated version of ISPConfig 3 is available and then download the tar.gz and start the setup script. Detailed instructions for making a backup before you update can be found here: http://www.faqforge.com/linux/controlpanels/ispconfig3/how-to-update-ispconfig-3/ If the ISPConfig version on your server does not have this script yet, follow the manual update instructions below. ------------------------------------------- - Manual update instructions ------------------------------------------- Code: cd /tmp wget http://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gz tar xvfz ISPConfig-3-stable.tar.gz cd ispconfig3_install/install php -q update.php
It looks like it's missing granting sys_ini access to slaves in multi server setup - or my setup is broken What permissions are required on that table? Full select? Thanks!
Updated my Debian servers with no problem. Almere, Thank you for finding this vulnerability. Groetjes uit Almere
Warnings in ISPConfig log on all slave servers after upgrade After upgrading from ISPConfig 3.0.5.2 to 3.0.5.3 within the ISPConfig log, i see a lot of warnings on the slave servers like: DB::query(SELECT * FROM sys_ini WHERE sysini_id = 1) -> mysqli_query SELECT command denied to user 'ispcsrv11'@'host.domain.tld' for table 'sys_ini' The master server does not give me these warnings. It seems to be a permission problem, how can i solve this?
I will check the sys_ini issue. Either there is a read access permission for the ispcsrv users missing or access to that table should have happened to the local table and not the remote one.
Thank you Till, I guess there's a little issue indeed with this version and I read here that I'm not the only one. Hope there will be a fix soon.
The sys_ini issue has been fixed in svn stable branch. It affects only a new function for quota warning emails which has been introduced in ispconfig 3.0.5.3.
Till, I just updated my ISPConfig machines but still get the warnings. should I wait for the 3.0.5.4 version? or should this be fixed already?
If you upgraded to stable, then that's normal, if you upgraded with svn version then that's not normal I guess. Be carefull switching from stable to svn may be a little messy (I did it 2 years ago and that was not a good idea at all).
I selected stable at the upgrade and since Till mentioned he updated stable I was under the impression that I would get the corrected code :-( I won't switch to svn version... I think it is a bit to tricky
I talked about the stable svn branch svn://svn.ispconfig.org/ispconfig3/branches/ispconfig-3.0.5, not the tar.gz download and not the svn trunk that neutrino mentioned.
Hello Till, Thanks for the Clarification. So we have to wait until the 3.0.5.4 release ( or at least the next release) for a fix? * Is there something which I can do manually to prevent this from happening, I have 90 pages of warning in the log. *Is there a command to clear those in the database?
I think I found a (the) work around by doing the following: GRANT SELECT ON `dbispconfig`.`sys_ini` TO 'ispcsrv3'@'slave.server.org'; and ran the query "DELETE FROM `sys_log` WHERE `loglevel` = 1"; Do I need to change something else? The warnings are now gone.
All fixes are available in svn stable branch and can be downloaded form there if you want to apply a patch before the official release.
That's one option to get rid of the message without aplying the fix, just ensure that you undo the grant before you update to 3.0.5.4
Dashboard config Hi, is there a way in the current 3.5.0.3 version to personalize / modify the dashboard's layout? I realised after the upgrade that in admin's dashboard I have now also the Website Harddisk Quota and Mailbox Quota displayed as an extremely long list, and they also overlap with the earlier Account limits part on the right side. Can I somehow switch off the HD and Mailbox Quota displays to have only the account limits part? Cheers, Feri
