Enhancements

• Added quickhelp for “Expiration Email” field for the Let’s Encrypt Plugin in NodeWorx
• Added Upgrade UI tool for upgrading IW6 to IW7 (Internal Beta Testing, only, at this time)
• Raw headers removed from autoresponder and vacation messages
• Partially formed NodeWorx users removed from InterWorx database
• Options added to sync master SiteWorx user password changes to the passwords for the shell user (if enabled), FTP user, and postmaster email account
• Added Welcome page for new IW7 upgrades from IW6 (Internal Beta Testing, only, at this time)

Bug Fixes:

• Fixed issue changing domain PHP version when current version is set to ‘null’
• Fixed issue where chain certificates could be renamed twice in vhosts after using the domain promotion tool
• Resolved form error when editing Autoset Spam Preference plugin
• Corrected the initname used for controlling service if MySQL is provided by MariaDB to resolve potential for “Too many levels of symbolic links” error
• Fixed overage and suspended account messages in httpd 2.4
• Resolved issue enabling the Let’s Encrypt Plugin on new installs
• Fixed vhost ScriptAlias line generation to resolve potential for 500 errors
• Corrected issue where resellers couldn’t edit SW accounts in CloudLinux
• Fixed issues where Mailman options were listed in account edit/creation menus when the service was disabled
• Fixed a bug that prevented creation of SiteWorx accounts for resellers when using package templates created before Mailman was added

The post IW7 Current Beta–Version 7.4.1 build 1851 (2021-02-11) appeared first on InterWorx.

How to see if you are vulnerable:

You may check to see if your system is vulnerable by running the following command:

$ sudoedit -s /

If your system returns the following, your system is at risk:

sudoedit: /: not a regular file

If your system returns the following, your system has received the patch:

$ sudoedit -s /
usage: sudoedit [-AknS] [-r role] [-t type] [-C num] [-g group] [-h host] [-p prompt] [-T timeout] [-u user] file ...

If your system is not set to receive automatic updates, you may manually update sudo using the “yum” command; however, you may need to enable a specific repo using  –enablerepo in conjunction with yum for EL6 or EL7.

Updating EL6 with InterWorx 6:

To update using the NodeWorx UI, go to NodeWorx > Server > Software Updates

yum clean all
yum --enablerepo interworx-stable update sudo

Updating EL6 with InterWorx 7:

To update using the Nodeworx UI, go to NodeWorx> Server > Software Updates

yum clean all
yum --enablerepo interworx-7-base update sudo

Updating EL7 (All versions of InterWorx):

yum clean all
yum --enablerepo base update sudo

If you have any further questions, please do not hesitate to contact via Facebook, Twitter, or our Support channels.

The post Regarding CVE-2021-3156 appeared first on InterWorx.

New Features:

• Mailman support added. Mailman is a software package that may be used to manage electronic mail discussions and e-newsletter lists

Information on enabling Mailman in NodeWorx can be found here


Information on using Mailman in SiteWorx can be found here

• SiteWorx Backup Cron plugin now available. This plugin allows NodeWorx users the ability to schedule automatic backups of all SiteWorx accounts on the server from the GUI

More information on the plugin can be found here

Enhancements:

• Add ~iworx/bin/disable-eol-centos6-repos.pex script. This disables CentOS 6 yum repositories to prevent future yum issues, due to CentOS 6 being EOL
• Import tool now accepts new Plesk backups which include the backup agent-name “Plesk.PHP”
• Upgrade script checks for Let’s Encrypt version updates
• Add API/CLI based targeted restore of files and databases from SiteWorx backup files

Bug Fixes:

• Add File Manager access to Domains Manage page in SiteWorx
• Fix bug in websetup where setup steps could advance unexpectedly
• Fix issue where search bar covers menu options on small screens
• Ensure that jailshell user cleanup does not execute if /chroot is symlink, in the unlikely event that /chroot points to /
• Fix issue where clicking on the scrollbar causes popup forms to automatically close
• Fix bug where editing the SiteWorx Backups Cron plugin gives a 600 error if no cron jobs exist for the root user
• Resolve issue where field labels are not visible on DNS Zone form
• Resolve issue where Domains Manage option was not available on servers using single-domain licenses
• Detect and replace invalid plan in daily cron for the Acronis plugin
• Resolve “This SiteWorx account did not exist at the time of the backup” error in Acronis, which is caused by different server configuration. Acronis Plugin now supports different server configurations
• Fix issue where self-generated SSL certificates could be replaced by InterWorx default SSL certificate upon upgrade
• Fix issue where saving plugin forms results in a 500 error
• Clarify wording on SiteWorx Backup Cron plugin setup form

The post IW7 Current Base–Version 7.3.0 build 1840 (2021-01-15) appeared first on InterWorx.

CentOS 6 has reached EOL, and the Linux Community will no longer support this release with any security patches or bug fixes. If you plan to use CentOS 6, we strongly recommend purchasing extended Cloudlinux Extended support for CentOS 6. For more information, please read https://blog.cloudlinux.com/6-month-to-centos-6-eol. 

We expect some users to remain on CentOS 6 due to the challenges faced when upgrading core operating system versions. Interworx does plan on continuing limited support for Interworx Core as long as the process is practical; however, this does come with some warnings.

Interworx will not provide a copy of CentOS 6. If you plan to use these repositories, you will be responsible for creating your own mirror or finding a 3rd party source (such as the Cloudlinux Extended support repository) if you plan to install Interworx on a new server utilizing these repositories. 

Interworx does use the EPEL (Extra Packages for Enterprise Linux) repository, which will also reach EOL; however, EPEL does keep EOL repositories publicly available. Please keep in mind that RPMs sourced from EPEL 6 will also no longer be receiving security patches or bug fixes.

We recommend migrating your server’s operating system to utilize CentOS 7 as soon as possible to continue to receive critical CentOS and EPEL security patches and bug fixes. Interworx does have a bulk migration tool to assist with moving to a CentOS 7 server and are currently working on an upgraded Migration Tool experience.

Interworx is planning on releasing support for CentOS 8 in 2021, with the anticipated CentOS 7 EOL date of June 2024.

If you have any questions or concerns, please feel free to reach out to us via our social media channels at Facebook, Twitter, Forums or our Support.

The post CentOS 6 End of Life (EOL) Begins Tomorrow, December 1st, 2020 appeared first on InterWorx.

Enhancements:

• Update iworxphp72-php to 7.2.34
• Update iworxphp72-php-ioncube-loader to 10.4.4
• Add the option to disable C-compilers for unprivileged users

Bug Fixes:

• Resolve issue where Let’s Encrypt certificates failing to generate in NodeWorx due to rate limiting gives a 500 error
• Fix bug where, when generating a Let’s Encrypt certificate in SiteWorx, the www domain is included for DNS check, even if it is not selected as a Subject Alternative Name
• Remove S3 as a dropdown option in the GUI for SiteWorx Scheduled Backups
• Remove Nameservers from list of Subject Alternative Names in the SiteWorx Let’s Encrypt generator
• Error message added if selecting listed backups from before SiteWorx account was created in the Acronis plugin
• Fix bug where post-capture-script does not run after making a backup with the Acronis plugin
• Increase size limit for cron PATH= variable
• Fix bug where multiple plans were created in Acronis plugin when toggling backup setting
• Improve Acronis error log message when Acronis API errors are detected
• Fix bug where IW7 servers using F2A received “Too many redirect” errors in the browser after updating to 7.1.2
• Resolve 401 response for NodeWorx API action listDomainAccounts
• Fix issue where CSS does not load when navigating to https://ip.ad.dr.ess/webmail
• Fix issue where webmail login page displays system error
• Fix CSS issues on license activation page in the browser for new IW7 installs
• Fix issue where the SpamAssassin Custom Options menu does not load in IW7

The post Version 7.2.0 build 1812 (2020-11-19) appeared first on InterWorx.