Skip to content
SECURITY:
[user] generate_quota_list() could be leveraged via symlink attack to overwrite an arbitrary system file within the account.

NEW:
[File Manager] block critical directories from browsing. Behavior may be adjusted via Account > Settings > App Settings.
[PostgreSQL] v13/TimescaleDB v2 support.

FIXED:
[DNS Manager] cloning a domain persists old entries for 1 page refresh.
[Horizon] deserialization errors in UI.
[License] replacing an expired license may result in a misleading panel status.
[phpMyAdmin] self-signed certificate error reporting.
[phpPgAdmin] self-signed certificate error reporting.
[rspamd] cleanup self-scan/low-memory mode. Prior implementation launched a Redis instance as well as improperly configured sqlite backends. Note sqlite is deprecated in rspamd 2.
[user] generate_quota_list()- accept PANEL_BRAND values with spaces.
[user] rename_user()- refers to old username in Manage Mailboxes.
[web] add_subdomain()- address condition in which a badly formed symlink could result in changing /home recursively to account admin on subdomain creation.
[Web Apps] a known parented docroot blocks display of children.

CHANGED:
[API] extend server_name column length to match cp-proxy.
[apnscp.js] wrap apnscp.cmd() in JSON.
[Dovecot] Archive folder may now be created on the fly by enabling dovecot_remote_archive in Bootstrapper.
[EditDomain] cancel storage amnesty reset if diskquota modified while under amnesty.
[Mail] pass null driver reload request to parent driver.
[Postfix] cleanup various inheritence parameters in main.cf.
[Scopes] dns.ip4-pool + dns.ip6-pool expand CIDR notation.
[Server Information] report "available" memory.
[Setup Instructions] prefer service value settings over domain name.
[Summary] ignore cumulative CPU usage when telemetry is disabled.
[UI] add second style link for links that open in-situ to disambiguate from links that open in new tab.
[UI] all assets for an app may be overridden individually, including application.yml, by creating the file within config/custom/apps.
[web] www.subdomain DNS record creation may be controlled via [dns] => subdomain_implicit_www
[Web Apps] add "Flush Cache" option.
[Web Apps] ad hoc (manifest-based) web apps honor database configuration if specified for snapshot/export support.
[Web Apps] hide app meta from unprovisioned site.

REMOVED:
[Subdomains] stack preselections.