All Versions
66
Latest Version
Avg Release Cycle
91 days
Latest Release
-

Changelog History
Page 1

  • v1.6.11 Changes

    Important

    โšก๏ธ A bug in v-update-sys-hestia caused auto update to be not working. Please run: apt update && apt upgrade

    ๐Ÿ”’ Security

    • ๐Ÿ›  Fix issues with session timeout and filemnanger (#3004)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fixed an issue in auto update script for HestiaCP (#2967)
    • ๐Ÿ›  Fixed an issue in download ssl certificate in Firefox (#2979)
    • Resolve issue with idn domains and redirect (#2988)
    • โšก๏ธ Update Ipverse url for United Kingdom (#2962)
    • ๐Ÿ›  Fixed an issue with icons disapearing when viewing system logs
    • ๐Ÿ›  Fixd issue with unlimeted quota button on edit mail account

    Dependencies

    • โšก๏ธ Update Rainloop to 1.17.0 (#2957)
    • โšก๏ธ Update Zlib to 1.2.13
    • โšก๏ธ Update hestia-nginx to 1.23.2
    • โšก๏ธ Update hestia-php to 8.1.12
    • โšก๏ธ Update OpenSSL to 3.0.7
    • โšก๏ธ Update Filegator to 7.8.7
  • v1.6.10 Changes

    ๐Ÿ”’ Security

    • โœ‚ Delete temp files after password has been verified (#2958)

    Dependencies

    • โšก๏ธ Update Filegator to 7.8.3
    • โšก๏ธ Update PHPmailer to 6.6.5
  • v1.6.9 Changes

    • ๐Ÿ›  Fixed an issue when Installing Wordpress in a non english locale (#2788 #2818)
    • Reload Nginx on purging fast cgi cache (#2925)
    • โšก๏ธ Update max number of chars allowed for name (#2924)
    • ๐Ÿ›  Fixed few small issues with Lets Encypt for hostname (#2922)
    • ๐Ÿ›  Fixed few issues with Quick installers (#2921)
    • ๐Ÿ›  Fixed an issue with v-change-web-domain-name
    • โšก๏ธ Update sync-dns-cluster role to run v-delete-dns-domain (#2943)
    • ๐Ÿ›  Fixed issue with connection with sftp server running FreeBSD (#2950 @gdarko)
    • โž• Add support for Kurdish Sorani (#2945 @qezwan)
    • Small improvements in syntax for v-add-remote-dns-host (#2951)
    • Check if email is valid for PHPMailer (#2944)

    Dependencies

    • โšก๏ธ Update Dokuwiki to stable_2022-07-31a
    • โšก๏ธ Update Opencart to 4.0.1.11
    • โšก๏ธ Update Prestashop to 1.7.8.7
    • โšก๏ธ Update Jquery on login pages to 3.6.1 (#2932 @4183r)
    • โšก๏ธ Update hestia-php to 8.1.11
  • v1.6.8 Changes

    ๐Ÿ”‹ Features

    • โšก๏ธ Update default php settings (#2849 #2635)

    ๐Ÿ”’ Security

    • Fix issue in is_hestia_package (#2889)

    ๐Ÿ›  Bugfixes

    • โšก๏ธ Force update composer to v2 instead of v1 when no version is provided (#2839 #2777)
    • ๐Ÿ›  Fixed an issue with v-change-web-domain-owner and mail only domains (#2840, #2841)
    • ๐Ÿ“„ Grey out phpmyadmin buttons + add link to docs.hestiacp.com for support (#2843)
    • Block the use of CNAME records on @ or root records DNS domain (#2838, #2842)
    • ๐Ÿšš Code clean up and remove unused tests and templates (#2829 and #2831)
    • ๐Ÿ›  Fixed an issue where no password was send when a user create a new mail account (#2819 #2815)
    • ๐Ÿ›  Fixed an issue with Proxmox LXC and hostnames (#2819 #2048)
    • ๐Ÿ‘Œ Improve new email account email send to the user (#2819 #1417)
    • ๐Ÿ‘Œ Improve buffers nginx.conf (#2796)
    • ๐Ÿ‘Œ Improve Letsencrypt error message (#1804 #2854)
    • ๐Ÿ›  Fixed an issue with error logs failed login attempts (#2853)
    • ๐Ÿ›  Fixed and issue with saving UTC time zone in Edit server (#2851 #2853)
    • ๐Ÿ›  Fixed an issue with sshd not running but still showing up in rare cases (#2850 @manuelserol)
    • ๐Ÿ‘Œ Improve error message "Domain already exists" when the "main" domain belonged to an other user (#2848 #2771)
    • ๐Ÿ›  Fixed an issue with v-delete-letsencrypt not working when deleting a mail domains SSL (#2878)
    • ๐Ÿ›  Fixed an issue with storing B2 Secret key in b2.conf (#2843)
    • โšก๏ธ Update jail.local with example to add ignore ip (#2856)
    • Add use_temp_path to no to slightly speedup caching (#2855)
    • ๐Ÿ›  Fix small php errors (#2863 #2857 @YacineSahli)
    • ๐Ÿ›  Fixed an issue API and DNS cluster over multiple servers where username/password and hash where mixed (#2888)
    • โž• Add option to use custom javascript code (#2747)
    • โž• Add "v-rebuild-dns-domains" to sync-dns-cluster options
    • ๐Ÿ›  Fixed an issue with Yescript and api (#2899)
    • โž• Add logrotate config for Roundcube (#2868 #2904)
    • ๐Ÿ›  Fixed an issue with session files in /tmp/ folder caused by /web/inc/mail-wrapper.php (#2904)
    • ๐Ÿ›  Fixed an issue with v-restore-user does not delete old database before restoring causing new tables to remain exists (#2911 #2909)
    • ๐Ÿ›  Fixed an issue with deleting mail account does not remove ratelimit for that email account (#2905 #2903)

    โœจ Enhancements

    • Clean up / decrease size of images, favicons, javascript, css and html (#2879, #2871, #2872, #2873, #2884, #2883, #2879 @AlecRust)

    Dependencies

    • โšก๏ธ Update hestia-nginx to 1.23.1
    • โšก๏ธ Update hestia-php to 8.1.9
    • โšก๏ธ Update animate.js to 3.0.2 (#2879)
    • โšก๏ธ Update normalize.css to 3.0.3 (#2875)
    • โšก๏ธ Update jQuery to 3.6.1 (#2885)
    • โšก๏ธ Update MediaWiki to 1.38.2
    • โšก๏ธ Update PHPmailer to 6.6.4
    • โšก๏ธ Update Blackblaze CLI to 3.5.0
  • v1.6.7 Changes

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fixed an issue with upgrade script Roundcube that caused issues with upgrade of new installs
    • ๐Ÿ›  Fixed an bug with DNS templates #2827
    • โšก๏ธ Update v-update-sys-hestia-git
  • v1.6.6 Changes

    ๐Ÿ›  Bugfixes

    • โšก๏ธ Update DNS templates with CNAME for ftp, www and webmail (#2808)
    • ๐Ÿ›  Fix name server A record validation error (#2807)
    • ๐Ÿ›  Fixed issue with renaming domains and config files not properly removed (#2803)
    • โž• Add loading indicator after clicking save button (#2740)
    • ๐Ÿ‘Œ Improve hostname detection in mail-wrapper (#2805 @clarkchentw)

    ๐Ÿ”’ Security

    • ๐Ÿ›  Fixed an vulnerability in v-add-web-domain-redirect (CVE-2022-2636)
    • ๐Ÿ›  Fixed an vulnerability in Ubuntu that can lead in privilege escalation for admin to root user (CVE-2022-2626)

    Dependencies

    • โšก๏ธ Update Roundcube to 1.6.0
    • โšก๏ธ Update Dokuwiki to "2022-07-31" Igor (#2811)
  • v1.6.5 Changes

    ๐Ÿ›  Bugfixes

    • โž• Add missing translation strings (#2778 @myrevery)
    • โž• Add check if folder exists in v-change-web-domain-docroot (#2778)

    ๐Ÿ”’ Security

    • ๐Ÿ‘Œ Improve random bytes generator (#2774)
    • ๐Ÿ’ป Don't allow /inc/2fa/secret.php called from the web browser directly (#2784 @mayappear)
    • ๐Ÿ‘Œ Improve CSRF Origin Check Bypass (#2785 @mayappear)
    • ๐Ÿ›  Fix vulnerability in Dokuwiki Quick Install App @redstarp2 (CVE-2022-2550)
    • ๐Ÿ›  Fixed an issue where custom ports where not saved on restart fail2ban service making Hestia login screen vulnerable for brute force

    Dependencies

    • โšก๏ธ Update Filegator to 7.8.2
  • v1.6.4 Changes

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fixed an issue with downloading log files ()
    • ๐Ÿ›  Fixed an issue with installing Quick Installers (#2762, #2760, @divinity76)
    • ๐Ÿ›  Fixed an issue with Apache Access / Awstats logs IP after using v-update-sys-ip (#2759 @adion-gorani)
  • v1.6.3 Changes

    ๐Ÿ”‹ Features

    • โž• Add additional support for bcrypt for mail passwords (#2752 @divinity76)

    โœจ Enhancements

    • Simplify md5crypt on reset form email (#2751 @divinity76)
    • ๐Ÿ‘‰ Use secure RNG to generate passwords (#2726)
    • โž• Add twig support filemanger (#2714, @anvme)

    ๐Ÿ›  Bugfixes

    • ๐Ÿ›  Fixed an issue with restart Apache2 and Nginx after v-update-letsencrypt (#2748, #2563, #2744, #2677)
    • Prevent transversing path in Quick installer apps (#2742)
    • Avoid out of memory serving large logfiles (#2741, #2736, @divinity76
    • ๐Ÿ‘Œ Improve passwords loading in password_valid (#2739)
    • ๐Ÿ‘‰ Use secure RNG to generate passwords (#2726)
    • Utilise entire alphabet for random string (#2735 @Shadowfied)
    • Don't use hosts_try_fastopen in Exim for Gmail / Google hostnames
    • โž• Add check if Sieve is already installed (#2719 #manuelserol)
    • ๐Ÿ‘ Allow PHP templates to be selected in Quick installer apps (#2713, #2711, #2690)
    • ๐ŸŒ Small changes to translation strings (#2700 @V4M0N0S)
    • ๐Ÿ’ป Rate limit in email address blank in UI (saved correct in limits) (#2710, #2707)
    • ๐Ÿ›  Fixed a bug in Settings sites where always websites got rebuild on save (#2705, #2710)
    • ๐Ÿ›  Fixed a bug in Weblog where the session got incorrectly reset as admin user (#2710)
    • ๐ŸŒ Prevent v-add-web-php to be used for non fpm installs (#2753)
    • โšก๏ธ Update translations (#2750)
    • Chmod o+x .ssh folder when creating file manager ssh key (#2755)

    Dependencies

    • โšก๏ธ Update hestia-php to 8.1.8
      • Update disable_functions list php.ini for hestia-php (#2746, #2741)
  • v1.6.2 Changes

    • ๐Ÿ›  Fixed an issue with rate limits in Exim4 and make it more bullet proof (#2703)
    • ๐Ÿ›  Fixed an issue with system-filter not propperly loaded in Exim4 for Exim 4.94 and Ugrades from 1.5.x