You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+38-38Lines changed: 38 additions & 38 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,92 +6,92 @@ All notable changes to this project will be documented in this file.
6
6
7
7
### Notes
8
8
9
-
- To improve security we have deciced to allow users to rename the default admin user. And use a new user "hestia-web" to become the default user to run Hestia on.
10
-
-
11
-
- In initial versions of HestiaCP we had Jailed SSH enabled via Jailkit. It had major disadvantageswe have decided it to replace with Bubble Wrap. Users running Jailed SSH in the past are adviced to run the migration script! Found in /usr/local/hestia/upgrade/manual/migrate_jailkit_to_bubblewrap.sh. See #4698
12
-
- We are aware that Cgroups are currently not working as it should be. It works fine if you login with SSH as the user how ever it doesn't work for PHP-FPM yet.
13
-
- Dropped support Debian 10 due to EOL.
9
+
- To improve security, we now allow users to rename the default `admin` user.
10
+
- Hestia now runs under a new `hestia-web` user.
11
+
- In initial versions of HestiaCP, we used Jailkit to enabled Jailed SSH. It had major disadvantages, so we have decided it to replace it with [bubblewrap](https://github.com/containers/bubblewrap). Users running Jailed SSH in the past are advised to run the migration script! It can be found in `/usr/local/hestia/upgrade/manual/migrate_jailkit_to_bubblewrap.sh`. See [#4698](https://github.com/hestiacp/hestiacp/pull/4698)
12
+
- We are aware that cgroups are currently not working as they should be. They work fine if you login with SSH as the user, but they don't work for PHP-FPM yet.
13
+
- Dropped support for Debian 10 due to EOL.
14
14
15
15
### Security
16
16
17
17
- Fix issue where CIRD was not propperly validated CVE-XXXX-XXX-XXX
18
18
- Restrict PHP-FPM permissions to a new user to prevent permission escalation to admin users. CVE-XXXX-XXX-XXX
19
-
- Solve security issues where restart flag did accecpt unvalidated values. CVE-XXXX-XXX-XXX
19
+
- Solve security issues where restart flag accepted unvalidated values. CVE-XXXX-XXX-XXX
20
20
21
21
### Features
22
22
23
-
-Added support for PHP 8.4
23
+
-Add support for PHP 8.4
24
24
- Add support for Ubuntu 24.04 Noble release (#4411#4451)
25
25
- Add support for Jailed SSH (#4052#4245, #4698#4687)
26
26
- Implement CLI for Quick Install Apps (#4443)
27
-
- Add support for Directadmin / Cpanel imports (#4177#4415#4426#4252#4241)
28
-
- Add support for Increamental Backups via Restic
29
-
- Add support for Triggers in v-add-mail-domain / v-add-delete-mail-domain #4416 (See Docs)
27
+
- Add support for DirectAdmin & cPanel imports (#4177#4415#4426#4252#4241)
28
+
- Add support for Incremental Backups via Restic
29
+
- Add support for Triggers in `v-add-mail-domain` / `v-add-delete-mail-domain`#4416 (See Docs)
30
30
- Add new Quick Install Apps (#4433, #4509, #4327)
31
31
- Add support for Limit CPU and RAM for Each User Using cgroup (#4372#4325)
32
32
- Add Web terminal (#3859)
33
33
- Improve email account sidebar layout (#4154)
34
-
- Allow Chmod in Filegator#4548
34
+
- Allow chmod in FileGator#4548
35
35
36
36
### Bug fixes
37
37
38
-
- Allow filegator to be translated (#4382#4275)
38
+
- Allow FileGator to be translated (#4382#4275)
39
39
- Fix bug caused by new release robthree/twofactorauth (#4410)
40
-
- Create .wp-cli folder on create new user (#4403)
40
+
- Create `.wp-cli` folder on create new user (#4403)
41
41
- Fix SMTP Relay routing issue (#4389)
42
42
- Fix Roundcube permissions (#4387)
43
-
- Fix v-add-dns-record when adding TLSA records (#4376)
44
-
- Fix handling of Snappymail (#4349)
45
-
- Added creation of dovecot.log and permission setup to dovecot installation step (#4352)
46
-
- Fix to the Localpart Mail validator so it can accept aliases starting and ending with (#4351)
47
-
- Apache2: Enable mod_headers by default. (#4350)
43
+
- Fix `v-add-dns-record` when adding TLSA records (#4376)
44
+
- Fix handling of SnappyMail (#4349)
45
+
- Added creation of `dovecot.log` and permission setup to the dovecot installation step (#4352)
46
+
- Fix to the Localpart Mail validator so it can accept aliases starting and ending with `-`(#4351)
47
+
- Apache2: Enable `mod_headers` by default. (#4350)
48
48
- Update MediaWiki to 1.41.1 (#4344)
49
49
- Add support for compressing via GZ or ZSTD (#4300#4322)
50
50
- Simplify spinner styles (#4319)
51
51
- Animate deletion of notifications (#4316)
52
-
- Update v-run-cli-cmd (#4310)
52
+
- Update `v-run-cli-cmd` (#4310)
53
53
- Show database server port in notification email (#4301)
54
-
-Fixes permissions issue related with Issue #4248 (#4268)
55
-
-remove PHP code, and fix installer warning (#4279)
54
+
-Fix permissions issue related with Issue #4248 (#4268)
55
+
-Remove PHP code, and fix installer warning (#4279)
56
56
- Prevent \* from expanding in command (#4085)
57
57
- Drop v-generate-debug-report (#4266)
58
58
- Fix missing dot file backups
59
-
-vsftpd use_localtime No #4261
60
-
- Fix broken mysql v8 install on Debian (#4259)
59
+
-Disable `use_localtime` for vsftpd (#4261)
60
+
- Fix broken MySQL v8 install on Debian (#4259)
61
61
- Use standard y/N format in installer to indicate default (#4251)
62
62
- Fix broken HTML on login/reset pages (#4247)
63
-
-Checks for usernames starting with a alphabetic character. (#4195#4181)
63
+
-Add checks for usernames starting with an alphabetic character. (#4195#4181)
64
64
- Correct formatting of user dir (#4098)
65
-
- Add mjs as a file to serve statically (#4240)
65
+
- Add `.mjs` as a file to serve statically (#4240)
66
66
- Display system time on cron pages (#4236)
67
67
- Patch Dokuwiki installer for issue #3889 (#4229)
68
-
- Corrected path to ssl certs (#4202)
68
+
- Corrected path to SSL certs (#4202)
69
69
- Add value to input type text (#4193)
70
70
- Correctly get the session cookie for web terminal (#3969)
71
71
- Fix Bug with 403 errors Letsencrypt (#4622)
72
-
- Update phpmyadmin.inc to improve loading static files
72
+
- Update `phpmyadmin.inc` to improve loading static files
73
73
- Fix issues with mapping ipv4 to ipv6 setups when server is behind proxies with login (#4606)
74
-
- Fix issue with v-change-sys-ip-nat with VSFTPD and systems behind NAT (#4591)
74
+
- Fix issue with `v-change-sys-ip-nat` with VSFTPD and systems behind NAT (#4591)
75
75
- Fix issues with IDN domains and Apache2 and PHP (#4583)
0 commit comments