Search results

  1. CrazyFrog

    Problems after remove_items: can't read /usr/local/lib/libnghttp2.la: No such file or directory

    Hello DA wizards, I'm trying to update PHP 8.0 to 8.1. On my test box I ran into a problem: `configure: error: iconv does not support errno` That was solved successfully thanks to a forum search, by doing: Everything built and it worked perfectly! Now of course, I'm trying it on a...
  2. CrazyFrog

    Solved One mailbox gives "Internal error occurred. Refer to server log for more information"

    Hi fellow DA wizards (well.. I'm not a wizard..) I'm having a strange problem with only one mailbox. I can't mail to it. When I grep /var/log/exim/mainlog I see that this user has the same problem multiple times. I find the following error in the mainlog multiple times: (Anonymized the...
  3. CrazyFrog

    Roundcube < 1.6.4: XSS vulnerability in Roundcube webmail

    From oss-security comes the following; Roundcube should be upgraded to 1.6.4. If that update is already available, thanks! ----- Versions up to 1.6.3 - not 1.6.4 - are vulnerable. https://www.cve.org/CVERecord?id=CVE-2023-5631 Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before...
  4. CrazyFrog

    ModSecurity 2.9.6 released with critical fixes

    https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.6 Could we have a version bump for CustomBuild? The patch is rather small and I already tried it out compiling it myself on a couple of machines, so I don't expect trouble. Note that also modsecurity.conf-recommended has changed, and...
  5. CrazyFrog

    European Cloudflare alternative?

    One of my customers (a school of course) gets a DDoS attack a few times a year. It is mostly a simple attack but it costs us (the customer) money. Our network provider does provide scrubbing of traffic and it works well, but they bill us for every incident. I proposed the customer to simply use...
  6. CrazyFrog

    Dovecot vulnerability (DOV-5320), is DA affected?

    Today a vulnerability in Dovecot (pop3/imap server) was announced. In insecure configurations, it could allow users to become Dovecot 'master users'. Is DirectAdmin affected by this? I am not so keen on the internals of how DA handles authentication for Dovecot. Maybe DA is unaffected by this...
  7. CrazyFrog

    Solved Quotas in DA are incorrect

    Hi everyone, We are getting some messages such as: User -redacted- has used up 4.98% of their bandwidth and 95.0% of their allocated disk space In the example you can see that DA thinks they use 950MB out of 1000MB. (See first attachment) But when I actually check out their home directory...
  8. CrazyFrog

    DA update installed lfd/csf, can I disable this?

    After doing a routine DirectAdmin / custombuild, I noticed that my server generated a "The service 'lfd' is currently down" message. I have never heard of lfd so I looked into it a bit and apparently, lfd/csf was installed and it had deleted my iptables firewall rules, putting the box wide open...
  9. CrazyFrog

    Exim vulnerability release

    Hey everybody, I saw that Exim has a new security release which looks important: I saw that it is not yet in CustomBuild. Could the Exim version be bumped in CustomBuild? Thanks in advance! CF
  10. CrazyFrog

    PHP links to old libicudata.so.48 after upgrade to Ubuntu 18.04

    Hi everybody, I am trying to upgrade a machine from Ubuntu 16.04 to Ubuntu 18.04. I have done the OS upgrade successfully, and am now trying a custombuild to build new daemons against the new system. However Apache breaks when I do this. The error message is: I verified that I am using a...
  11. CrazyFrog

    Dovecot 2.3.7.2 released, remote exploit

    hey all, the message below was just posted to oss-security. seems that Dovecot has a nasty remote vulnerability. (see below) The version in custombuild is 2.3.7.1 The fixed version is 2.3.7.2. could we get a version bump for custombuild?
Back
Top