ispCP Omega 1.0.3 Security Announcement
Benedikt Heintel
Sometimes not even the best testing help to find all remaining bugs in software and this time it's a security issue we overlooked in ispCP Omega 1.0.3.
If you have already installed ispCP Omega 1.0.3 on your server, get our security fix.
Just follow these instructions (as root):
# cd /var/www/ispcp/engine/setup
# wget -O- 'http://www.isp-control.net/ispcp/raw-attachment/ticket/2112/permission-fix.tar.gz' | tar -xzv
# ./set-gui-permissions.sh
# ./set-engine-permissions.sh
Else if you have not yet installed ispCP Omega 1.0.3, please proceed to https://sourceforge.net/projects/ispcp/ and download the latest released version of ispCP Omega 1.0.3-1. An update is strongly recommended, because all prior versions of ispCP Omega contain this security hole.
Beside the security fix ispCP Omega 1.0.3-1 eliminates those situations, where it was not possible to install ispCP Omega for some reason.
ispCP Omega 1.0.3-1 does not implement any new features or bugfixes. There is no need to install ispCP Omega 1.0.3-1 on a running ispCP Omega 1.0.3. (Please don't forget the security fix!)
ispCP Omega is an open source solution to all your web hosting needs. You can download the latest stable release from the downloads section. Before you download ispCP, please browse through our comprehensive ispCP documentation [1] section and review the System Requirements [2], Installing ispCP [3], Frequently Asked Questions [4] and HowTo's [5].
Best Regards
Benedikt Heintel
Project Manager
*Caution: Manual DNS Management is in an experimental state. This means that the functionality is not always working as expected.
[1] http://www.isp-control.net/documentation/
[2] http://www.isp-control.net/documentation/about/requirements
[3] http://www.isp-control.net/documentation/start/installation
[4] http://www.isp-control.net/documentation/frequently_asked_questions
[5] http://www.isp-control.net/documentation/howto