Dear Parallels Plesk Panel Customer:
Please read this message in its entirety and take the recommended actions.
Parallels has released a new set of Critical MicroUpdates for certain versions of Plesk Panel 10.4 or earlier to address functional fixes, stability, and security – including for third-party components. This notification is intended to encourage all customers to apply these MicroUpdates at their earliest convenience.
These MicroUpdates are not needed for Parallels Plesk Panel 11. Updating prior versions to Parallels Plesk Panel 11 eliminates the need to apply this set of Critical MicroUpdates. Parallels Plesk Panel 11 can be downloaded from: http://www.parallels.com/download/plesk
These Critical MicroUpdates are available for Windows and Linux for the following versions of Parallels Plesk Panel:
Please refer to this Knowledge Base article for installation instructions: http://kb.parallels.com/114377
By applying this new MicroUpdate, all previous MicroUpdates will also be applied (including those discussed in the most recent advisory: http://kb.parallels.com/113321
Independent of this update Parallels has become aware of unsubstantiated claims of a new Security Vulnerability in Parallels Plesk Panel version 10.4 and earlier (http://kb.parallels.com/en/114330
). After extensive investigation, Parallels has traced all reported issues back to the vulnerability already reported and closed with the February 2012 security advisory http://kb.parallels.com/113321
. This vulnerability has had patches and remediation steps available since February 2012.
Parallels takes the security of our customers very seriously and encourages you to take the recommended actions as soon as possible.
Important Note: Your updated Parallels Plesk Panel installation will only be secure if your underlying server infrastructure is correctly maintained and patched. Please ensure that all your server components including operating systems and databases are correctly patched and up-to-date.
- The Parallels Plesk Panel Team