H-Sphere versions:   2.4.x only

This release contains Apache of 1.3.36 version, fixes mod_imap "Referer" Cross-Site Scripting Vulnerability, and updates:

• CP Apache package to version:
  • hsphere-cpanel-apache-1.3.36-1 (Linux)
  • hsphere-cpanel-apache-1.3.36_1 (FreeBSD)
• Webbox Apache package to version:
  • hsphere-apache-webbox-1.3.36-1 (Linux)
  • hsphere-apache-webbox-1.3.36_1 (FreeBSD)

Requirements

Make sure to have the following packages installed before you start the upgrade:

- The latest OpenSSL for all versions of H-Sphere. Install it as per OpenSSL documentation
- The latest zlib update which eliminates potential security vulnerabilities in previous versions.

Custom PHP: If you have custom php modules installed on H-Sphere WEB boxes, don't forget to back them up before upgrading the software. After the upgrade, set them back up and restart the service.

If you are using Zend Optimizer or other optimizers, you will need to upgrade them to new version after upgrading PHP.

Procedure

1. Log into your control panel server as root:
   

   su -

2. Unpack the archive:
   

   tar xzf u-apache-1.3.36-1.tgz

3. Enter the unpacked directory:
   

   cd u-apache-1.3.36-1

4. H-Sphere is stopped automatically by the Update script. To make sure it is stopped, run:
   Linux:
   

   /etc/rc.d/init.d/httpdcp stop

   FreeBSD:
   

   /usr/local/etc/rc.d/apachecp.sh stop

   To stop SiteStudio, stop Imaker by running:
   

   kill -9 `ps -axw|grep imaker.sh |grep -v grep|awk '{print $1}'`
   kill -9 `ps -axw|grep ImageMaker|grep -v grep|awk '{print $1}'`

5. Run the update:
   

   sh update.sh | tee update.sh.log

6. Make sure CP is started properly:
   

   ps axw | grep httpd |grep cpanel
   ps axw | grep java

   If it isn't, run:
   Linux:

   /etc/rc.d/init.d/httpdcp start

   FreeBSD:
   

   /usr/local/etc/rc.d/apachecp.sh start

7. Start ImageMaker:
   Linux:
   

   # /hsphere/shared/SiteStudio/imaker.sh start >& /hsphere/shared/SiteStudio/var/error_log 2>&1 &

   FreeBSD:
   

   # /hsphere/shared/SiteStudio/imaker.sh start >& /hsphere/shared/SiteStudio/var/error_log &

8. View Update screen:
   

   less update.sh.log