2.4.1 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Mon, 22 January 2024 08:08:08 New: - Translations: Bosnian Enhancements: - The issuance of Let's Encrypt certificates is being tested against the staging environment first to avoid rate limit errors - The performance of creating sites, especially Node.js sites, has been enhanced Fixed: - #382 phpMyAdmin sorting not working - #383 Instance Reboot at Admin/Instance/Setting doesn't reboot and block auto login from login pages - #406 CloudPanel Dashboard doesn't when using the AWS EC2 installer. - Translation Fixes Security: - Vulnerability that allows a user with the lowest privilege to conduct a session hijacking, subsequently gaining unauthorized access to the admin and other user accounts. (Muhammad Aizat, datack.my) 2.4.0 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Tue, 28 November 2023 08:08:08 New: - PHP 8.3 Support - Node.js 20 LTS Support - Translations: Danish, Czech Enhancements: - The databases are backed up prior to executing remote backup - The site settings and vhost are being included in the remote backup file - Updated phpMyAdmin to 5.2.1 Fixed: - #329 duplicate settings key in file-manager.conf - #338 The original certificate is not removed when you delete a web application - #355 Login Page Autocomplete/Password Manager Issue - #363 Custom v2-varnish vhost templates cause a 403 page and missing Varnish settings - #359 When you delete a website the nodejs app started with PM2 is not deleted - #367 phpMyAdmin basic auth doesn't work when CloudPanel basic auth is enabled Security: - File Manager: CVE-2023-43880: New file chown issue - File Manager: CVE-2023-43881: Zip symlink (BSDTAR) - Command Injection (Yell Phone Naing) 2.3.2 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Mon, 21 Aug 2023 08:08:08 New: - Translations: Korean, Persian Fixed: - #298 Mask MySQL root password when throwing an exception Enhancements: - Vietnamese Translation - RTL stylesheet improvements, Thanks to @Yaser Security: - MySQL Root Password Leak from site user - Privilege Escalation to root from user (Yell Phone Naing) 2.3.1 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Tue, 20 June 2023 08:08:08 Fixed: - #287 Colon in remote cloud backup breaks most filesystems - #290 File Manager Extract not working since v2.3.0 - #293 Strange \n\n inside the certificate file used for custom domain. Enhancements: - Russian Translation Security: - Critical: Insecure file manager cookie authentication (Muhammad Aizat, datack.my) - Insecure File Upload leads to Privilege Escalation and Authentication Bypass (Muhammad Zulfiqar) 2.3.0 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Tue, 06 June 2023 08:08:08 New: - Translations: Bulgarian - New CloudPanel CLI Root Commands: - User: - user:add - user:delete - user:list Enhancements: - The site user name and password can be entered manually for new WordPress sites. Fixed: - #278 CLI need normalize domain name field - #284 CLPCTL - Problem with special characters in password result false error Security: - Critical (CVE-2023-33747): Privilege Escalation to root from user (Muhammad Aizat, datack.my, host.sabily.info) - OS Command Injection (Laurence, crowdsec.net) 2.2.2 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Tue, 04 Apr 2023 08:08:08 New: - Translations: Japanese, Hebrew - MariaDB 10.11 Support Fixed - #245 New Reverse Proxy | root folder permission in htdocs - #254 Site path / copy and paste issues 2.2.1 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Mon, 27 Feb 2023 08:08:08 New: - Translations: Chinese (Simplified), Chinese (Taiwan) - Reverse Proxy Fixed - #210 Dark mode: Separating table borders missing - #220 Hetzner Snapshot cleanup throws an exception when delete protection is enabled on a snapshot 2.2.0 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Thu, 08 Dec 2022 08:08:08 New: - Add PHP 8.2 Support (https://feature-requests.cloudpanel.io/posts/15/support-for-php-8-2) - Added Dark Mode (https://feature-requests.cloudpanel.io/posts/1/add-dark-theme) - Add Node.js 18 LTS Support Improvements - File Manager order Directories before Files (https://feature-requests.cloudpanel.io/posts/30/file-manager-order-directories-before-files) Fixed - #208 Unable to create a WordPress site with a database server that doesn't use the default port 3306 2.1.0 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Thu, 08 Nov 2022 08:08:08 - Added Varnish Cache - Improvements: - Generate Password Link for Site User Password Update - Fixed: - #138 WordPress Admin login doesn't work with passwords which contains special characters like - #150 Cron Job PHP version issue - #153 Backup Custom Rclone Config Time 2.0.4 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Thu, 08 Sep 2022 08:08:08 - Added translations: Arabic, Ukrainian - Fixed: - #137 Remote backups don't get deleted after configured retention period, it affects only the SFTP storage provider - Translation Fixes 2.0.3 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Wed, 24 Aug 2022 08:08:08 - Added Remote Backup - Added translations for: Italian, Indonesian, Spanish, Russian, Polish, Vietnamese - Fixed: - #115 - Using " in the additional directives configuration breaks CloudPanel - #122 - Numeral in Domain Name Can't Install Wordpress - #132 - 413 Request Entity Too Large, File Manager file upload over 512MB with custom domain 2.0.2 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Tue, 05 Jul 2022 08:08:08 - Remove WP settings: - FS_CHMOD_FILE - FS_CHMOD_DIR 2.0.1 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Mon, 04 Jul 2022 08:08:08 - Translations fixes - Added Portuguese (Brasil) translation - Added Turkish translation - MariaDB 10.8 support for Ubuntu and Debian - Fixed two level subdomain site user name generation (wp.blog.eu.org, 4you.cheap) - Add WP default settings: - WP_MEMORY_LIMIT: 256M - WP_MAX_MEMORY_LIMIT: 512M - FS_CHMOD_FILE: 0644 - FS_CHMOD_DIR: 0755 2.0.0 Stefan Wieczorek <stefan.wieczorek@cloudpanel.io> Mon, 20 Jun 2022 08:08:08 - Initial Release