A new build of cPanel/WHM is being released to all tiers tonight to address CVE-2012-2978. CVE-2012-2978 addresses an issue with NSD (an authoritative DNS server) which did not properly handle non-standard DNS packets. A patch has been supplied by NLNet Labs.
We do not use NDS on our managed server. If you are running an unmanaged VPS or dedicated server you will want to make sure this patch is applied. If your server is setup for automatic updates the changes will roll in this evening. If your server is configured for manual updates you should apply the changes as soon as possible.
The new cPanel and WHM versions are as follows:
Tier |
Version |
|---|---|
| Stable | 11.23.3.23 |
| Releasee | 11.23.3.23 |
| Current | 11.23.3.23 |
| Edge | 11.23.4.11 |