All CPanel servers will have security updates applied in the coming
days. The server technicians will be enabling the Symlink Patch on the
servers as security measure. This patch will ensure that no user can
create a link in their account to files under another user, or server
configuration files, and thus accessing information from it.
This update will require apache to be recompiled on the server, and means php 5.3 will be enabled by default on the server. If your website is running very old software that doesn't run under php5.3, we should be able to switch back individual websites back to to PHP 5.2 upon request. Please note that PHP 5.2 is now end of life, and has been replaced by PHP 5.3, so we would recommend updating your website to run under PHP 5.3.
The other thing about this update, is that it will mean that we will
need to cease providing shared secure certificate access on all shared
CPanel hosting servers, effective immediately. This is due to the way
shared secure certificates run on CPanel servers. Unfortunately using a
shared secure certificate is now deemed to be too much a of a security
problem. This is being done for the security of all users of the shared
CPanel servers.
If clients need a secure certificate, we do still allow dedicated
certificates to be installed. Clients who need a secure certificate for
their website will need to buy one, and their own dedicated IP. Please
contact us to arrange this. We do how still offer a shared secure
certificate on our non CPanel unmetered web hosting plans, however it
may also be removed if it is deemed to be a security issue.
This update will also cause downtime of around an hour. The technicians will be working their way through the servers, so the update maybe done at anytime. As it is an urgent update, we can't delay this update. We apologise for any inconvenience.