Patches&Updates Webmail Systems Security Update



29 Nov 2005

This security release updates hsphere-webmails package to hsphere-webmails-2-8 on mail servers and:

  • eliminates a Horde security hole by updating Horde to version 3.0.7
  • fixes sendit_mconnect.sh script (sending mail in sqwebmail via SMTP)
  • fixes /hsphere/shared/scripts/imapproxy-init script

IMPORTANT:

1. smdcheck option, if enabled, does not automatically switch SQwebmail & IMP to sending mail via SMTP. Execute:

/hsphere/shared/scripts/mailsend_type.sh smtp
(Usage: mailsend_type.sh [ smtp | sendmail ])

2. This security update concerns all H-Sphere versions. However, if you want sending mail via SMTP to work correctly for sqwebmail, apply it to H-Sphere 2.4.3 Patch 8 which contains hsphere-mail-service-3-12.

Update procedure:

  1. Log into your control panel server as root:
    su -
  2. Download the update package from our site:
    Linux:
    wget http://www.psoft.net/shiv/HS/u-webmails-2-8.tgz
    FreeBSD:
    fetch http://www.psoft.net/shiv/HS/u-webmails-2-8.tgz
  3. Unpack the archive:
    tar xzf u-webmails-2-8.tgz
  4. Enter the unpacked directory:
    cd u-webmails-2-8
  5. Run the script:
    /bin/sh update.sh


Home Products Documentation Forum Support Partners Contact Us
Copyright 1998-2008. Positive Software Corporation.
All rights reserved.