Is some form of testing process really that difficult? The new 10.3.1 release of the microupdate for suexec installs suexec with permissions 644 which of course breaks every site on the server using cgi scripts. It also changes the group membership from apache to root.
For those whose sites are now down, run this as root on your server:
chgrp apache /usr/sbin/suexec
chmod 4510 /usr/sbin/suexec
For those whose sites are now down, run this as root on your server:
chgrp apache /usr/sbin/suexec
chmod 4510 /usr/sbin/suexec