Parallels

WEBppliance Pro 3.5.1 provides a security patch that resolves the Sendmail and OpenSSL security vulnerability.
It also fixes some of the high priority bugs reported in Webppliance Pro 3.5.0.

Compatibility : 

You can upgrade to WEBppliance PRO 3.5.1 from any of the following versions of WEBppliance

• Version 3.0.x
• Version 3.1.x
• Version 3.5.0

Fix provided for the following security issues :

• Sendmail vulnerability that allows local and possibly remote attackers to gain root privileges. 
  
  There is a vulnerability in Sendmail versions prior to and including 8.12.8. The address parser performs insufficient bounds checking in certain conditions due to a char to int conversion, making it possible for an attacker to take control of the application. Although no exploit currently exists, this issue is probably locally exploitable and may also be remotely exploitable. 
  
  Advisory details for the security patch are available at the following URL: 
  http://rhn.redhat.com/errata/RHSA-2003-120.html

• OpenSSL vulnerability that allows a potential timing-based attack and a modified Bleichenbacher attack. 
  
  The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack." 
  
  Advisory details for the security patch are available at the following URL: 
  http://rhn.redhat.com/errata/RHSA-2003-101.html

Other Resolved Issues :

• If your WEBppliance has a deleted reseller, this would cause upgrade to fail. This has been corrected in 3.5.1.     
• If your WEBppliance has reseller sites with disabled disk quota, upgrade would fail. This has been corrected in 3.5.1.     
• Previously, upgrade would stop at the first site that fails upgrade. Upgrade now processes all sites during an upgrade logging info on all sites that fails to upgrade correctly. If any site failed upgrade, WEBppliance doesn't exit Maintenance mode. The user must repair all failed sites, and restart WEBppliance to complete the upgrade.     
• RedHat 7.3 broke out CGI.pm into the rpm perl-CGI. On an upgrade or a new install of WEBppliance Pro 3.5.0, this RPM isn't installed and perl CGIs are broken because of this. This new RPM is now included in WEBppliance Pro 3.5.1.     
• Corrects a problem with restoring a backup from some ftp servers.     
• A missing Appliance Admin email address no longer causes an upgrade to fail. Logging of upgrade has been improved.     
• Two or more domains with the exact same 1st 30 characters no longer cause upgrade to fail.

Installation Instructions 

Note: Before installing WEBppliance Pro 3.5.1 on your server, please make sure that you have upgraded 
your base distribution file system to the latest version i.e. BFS for 7.3-93 or higher.

Important: When you upgrade to WEBppliance Pro 3.5.1, ensure that you select all the services
and add-ons, installed on your existing WEBppliance, for upgrade.

Upgrading to WEBppliance Pro 3.5.1 for Linux (LH) 

To upgrade to WEBppliance Pro 3.5.1, you need to download the WEBppliance Pro 3.5.1 patch
from AppXchange onto ServerXchange (must have ServerXchange 3.1.5 or higher) 
and then install WEBppliance Pro 3.5.1 on your server.

Download WEBppliance Pro 3.5.1 patch from AppXchange

1.  Connect to AppXchange with your user name and password.

2.  In the Web Hosting area, click View.

3.  In the Select column, select the Linux WEBppliance 3.5.1 check box, then
     click Add selected items to cart. 

4.  Click Download to download the selected patch. 

5.  Review the license agreement, then click Agree.

    The selected patch is downloaded. Action information and a progress report are displayed.

    Click Done below the progress report and proceed to install WEBppliance Pro 3.5.1 onto your server.

Install WEBppliance Pro 3.5.1 onto your server   

1.  In the Server and Application Manager interface, click Servers on the left navigation bar. 

2.  Locate the server on which you want to upgrade WEBppliance.

3.  Click on the host name of the server.

4.  Click the Applications tab.

5.  Select the Install option, from the list of menu options displayed under the Applications tab.

6.  Locate WEBppliance 3.5.1 and select the corresponding check box in the Select column. 

7.  Click Next.

8.  Select the Services installed on your existing WEBppliance for upgrade.

9.  Click Next.

10. Click Finish to upgrade your WEBppliance. 

     After successful upgrade, the WEBppliance automatically restarts.

Restarting the sendmail and openSSL service after upgrade

1.  Log in to the Appliance Administrator control panel with your user name and password. 

2.  Click Services on the left navigation bar. 

3.  In the Service column, locate Sendmail SMTP Server, and click the Restart  icon.
     On restarting the server successfully, a "successful" status message appears above
     the Services area.

4.  In the Service column, locate Web Server, and click the Restart  icon. On restarting the server successfully, a "successful" status message appears above the  Services area.