v1.9.1

Features

Incremental Backups.
imagick extension added to CyberPanel PHP Extension Installer
Feature: Auto Request 15 days trial for LSWS Ent

Bug Fixes

detached mode: instantly change php version
bug fix while creating email.
Bug fix: dont update email passwords on upgrade if crypt detected
WP Staging: Exclude some folders
bug fix: backup schedule
bug fix: reset acl for users.
WP Staging: Skip site url in wp-config.php
bug fix: remote transfer
bug fix: upgrade process
bug fix: git attach
bug fix: relative path issue while compressing
upgrade: postfix3
bug fix: SpamAssassin
bug fix backups: restore ssl
bug fix: email limits, cPanel Importer: custom child domain path
bug fix: dns manager
bug fix: Correctly store databases and users for cPanel Importer
bug fix: Cater special characters during database deletion
bug fix: fix misconfigured database users in cPanel importer
bug fix: Minor CSS issue
bug fix: Remove strict ping check for remote backups [AWS]
bug fix: backup engine
bug fix: cagefs disable
bug fix: install process
improvement: LSWS Switch
bug fix: select english default
bug fix: owner:group from logs, dont write access&errors
Fix Dates. Improve CSF integration. Fix Typos
Fixed serverLogs pages for Maillog and FTP logs for Ubuntu. Fixed CSF
Update CSF to enable Webui port 1025

v1.8.9

v1.8.9 Stable

Dated: 12th August, 2019

Features

Added list pages for Users, Packages and Emails.
Ability to control these list pages via ACL.
Enable/Disable creation of Fully Qualified Domains as child-domains through Packages.
Login Page: Press Enter to login.

Bug Fixes

Bug fixes to cPanel Importer for detecting email format.
Many bug fixes to Backup Engine and Remote Backups.
Bug fix to WordPress staging feature.
Bug fix to CSF.

v1.8.7

v1.8.7 Stable

Dated: 16th July, 2019

In between we also released v1.8.6, it was an emergency security release, thus this change log covers it.

Features

CageFS integration.
CloudLinux Integration.
Setup SSH access for website users from its launcher.

Bug Fixes

Bug fixes to cPanel Importer.
Other bug fixes that were introduced because of emergency security release v1.8.6

Security Update

v1.8.6 and v1.8.7 have many security enhancements. For all end user operations CyberPanel now use run-as user (the website user) to perform those operations. Special CyberPanel -> LSCPD connection is used for security communication for different sort of user elevation and to drop priviliges when necessary. Authentication token is used for communication to prevent un-athorized access to the command socket.

This will be our first security release in our 2-stage security release model. Everyone must update your servers to v1.8.7 as soon as possible.

Special thanks to rack911labs.com, for doing a security audit and help us find/fix the issues.