1.8.11 - Service release

Features

• PHP 8.3 Support (#4175)
• Add new template with Wordpress XMLRPC Blocked by default (Nignx Only) (#4168)

Bug fixes

• Minimal change to the way BACKUP_LA_LIMIT is calculated (#4162)
• Change Filegator to 24 hr clock (#4168)
• Confirm before restoring part of backup (#4147)
• Multiple Bugfixes v-import-cpanel (#4150, #4149 #4144 #4139, #4120, #4121 thanks @vipxr)
• Fix an issue with small screens in logs header (#4126)
• Fixed a few bugs due to the permissions changes with hestiamail user
• Updated v-list-sys-users to fix issues with new hestiamail user
• Use -f instead --force=yes (#4097)
• Delay submit in Desktop Safari (#4137)
• Fixed an bug in v-add-backup-host to report inability to connect via sftp (#4119)
• Allow for optional domain directory write permissions #4109 @EvoNet

1.8.10 - Service release

Bugfixes

• Update installers to create new user
• Include missing manual update script
• Include changes to www.conf

See 1.8.9 for security changes

1.8.9 - Service release

[1.8.9] - Service release

Security

• Restrict PHP-FPM permissions to a new user to prevent permission escalation to admin or other users
• Reduce Nginx keepalive_requests to 1000 (Nginx default) to limit risks of CVE-2023-44487

Bug fixes

• Fix: removing certificates during apache reload #4053
• Fix: Firehol blacklists #4046
• Fix PHP error + Add option to update WPCLI + Composer #4039
• Update v-add-mail-domain #4027 #4026
• Update MediaWikiSetup.php #4034
• Fix: for v-list-sys-services, pidof command in Debian Buster doesn't support option -d #4022
• Update main.php humanize_usage_size() #4015
• Fix: Prevent the script v-add-sys-roundcube from freezing during Roundcube upgrade #4018
• Fixed an issue with login when 2FA was enabled

Dependencies

• Update Filegator to 7.9.3
• Update Roundcube to 1.6.4
• Update Snappymail to 2.29.1

1.8.8 - Service release

Full Changelog: https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md

1.8.7 (Service Release)

Full Changelog: https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md

1.8.6 (Service Release)

Full Changelog: https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md

1.8.5 (Service Release)

Full Changelog: https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md

1.8.4 (Service Release)

Full Changelog: https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md

1.8.3 (Service Release)

This update includes quality improvements and is recommended for all users of Hestia Control Panel.

• [UI] Fixed an issue where the wrong user type icon was displayed the top menu bar (#3810)
• [UI] Fixed back button links on SSH, API, Logs, and White Label pages (#3811)
• [UI] Fixed "No IPset lists defined" even when lists are defined (#3812)
• [UI] Removed animation effect from login screen (#3822)
• [UI] Fixed an issue where search results were not being returned for all users when logged in as admin (#3833)
• [UI] Removed animations from all page loads to improve performance (#3836)
• [UI] Moved debug mode enablement switch to a more logical place (#3838)
• [DNS] Ensure domain is formatted properly with DNSSEC (#3814)
• [API] Added update-dns-record permission to the API (#3819)

1.8.2 Service release

• Added more files to default proxy extensions (#3768)
• Increased width of menu bar dropdowns on mobile (#3765)
• Increased HSTS max-age to 31536000 (#3762)
• Add prompt to v-update-sys-hestia-git to install NodeJS if not present (#3779)
• Fixed an issue where v-update-sys-ip was not run on boot on Debian systems
• Fixed an issue where the system hostname would lose its FQDN format on reboot when using Proxmox VE containers
• Fixed an issue ith v-generate-ssl-cert (#3783)
• Fixed an issue where the port was missing in welcome email (#3784)
• Fixed an issue with the is_mail_new function (#3785)
• Fixed an issue where the "Save" button would appear before warning was dismissed when attempting to add a domain or database as admin (#3786)
• Fixed an issue where MySQL 8 could not be installed on Ubuntu (#3788)
• Fixed an issue with TLS connections when using ProFTPD (#3790)
• Fixed an issue where vlan or virtual NIC connections would fail the adapter validity check when adding an IP address (#3797)
• Fixed several PHP 500 errors and warnings in the Control Panel backend (#3789)
• Fixed an issue with v-change-dns-domain-ip and DNS cluster (#3803)
• Update Multiple Quick install apps (#3800 and #3801)
• Updated language translations