HestiaCP Thread - come see what has been released

niceboy

Open source hosting control panel HestiaCP 1.10.4 released. Update your server now as some more security updates are published.

Website : https://www.hestiacp.com

Support forum : https://forum.hestiacp.com

Github : https://github.com/hestiacp/hestiacp

Security

Hide accidental password leaking via auth.log / journalctl for sudo commands #5648
Add owner verification to v-schedule-user-restore #5645

Changes

Disable imap and smtp debug in Roundcube by default to prevent disk space issues #5642
Add check_hestia_demo_mode to all v-list-*-ssl scripts #5639

Fixes

Fix database temp user creation failing on MySQL HeatWave due to Medium Password Policy #5453
Fix bug in SFTP backup rotation causing backup storage to not properly rotate #5646
Fix back link and Access Keys button pointing to wrong user #5635 #5638
Fix migration scripts not adding the imap_sieve plugin to the IMAP config #5637
Fix typo in serial causing an inconsistent default DNS serial value #5632
Improve File Manager installation validation and error logging #5634

COLBYLICIOUS

At this point can we create a single thread just for this control panel instead of creating new threads everytime an update appears?

Jord

What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

rpqu

@Jord said:
What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

Requesting similar thread for other type of discussion such as

• AI
• Hardware
• Network

Jord

@rpqu said:

@Jord said:
What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

Requesting similar thread for other type of discussion such as

• AI
• Hardware
• Network

Man this is why we can't have nice things

rpqu

@Jord said:

@rpqu said:

@Jord said:
What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

Requesting similar thread for other type of discussion such as

• AI
• Hardware
• Network

Man this is why we can't have nice things

It's better than having stray threads

Jord

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:
What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

Requesting similar thread for other type of discussion such as

• AI
• Hardware
• Network

Man this is why we can't have nice things

It's better than having stray threads

But those sort of threads might need different threads, this can't apply to everything. But in this case it can and would function better.

rpqu

@Jord said:

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:
What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

Requesting similar thread for other type of discussion such as

• AI
• Hardware
• Network

Man this is why we can't have nice things

It's better than having stray threads

But those sort of threads might need different threads, this can't apply to everything. But in this case it can and would function better.

I understand your concern. For example, hardware. It's not like I'm requesting all hardware discussion holed into that thread. Rather, it should serve as the place where people who want to discuss hardware like choosing raid, network card, thermal paste, racking gears, etc among the usual cpu/ram/storage. Looking for server units? Surely it should be posted on new thread

Jord

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:
What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

Requesting similar thread for other type of discussion such as

• AI
• Hardware
• Network

Man this is why we can't have nice things

It's better than having stray threads

But those sort of threads might need different threads, this can't apply to everything. But in this case it can and would function better.

I understand your concern. For example, hardware. It's not like I'm requesting all hardware discussion holed into that thread. Rather, it should serve as the place where people who want to discuss hardware like choosing raid, network card, thermal paste, racking gears, etc among the usual cpu/ram/storage. Looking for server units? Surely it should be posted on new thread

I don't have the correct permissions for that one sir

rpqu

@Jord said:

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:
What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

Requesting similar thread for other type of discussion such as

• AI
• Hardware
• Network

Man this is why we can't have nice things

It's better than having stray threads

But those sort of threads might need different threads, this can't apply to everything. But in this case it can and would function better.

I understand your concern. For example, hardware. It's not like I'm requesting all hardware discussion holed into that thread. Rather, it should serve as the place where people who want to discuss hardware like choosing raid, network card, thermal paste, racking gears, etc among the usual cpu/ram/storage. Looking for server units? Surely it should be posted on new thread

I don't have the correct permissions for that one sir

Uh, okay. I'd raise it to admins later

Jord

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:

@rpqu said:

@Jord said:
What a cracking idea, from now on lets call this the ongoing thread for HestiaCP @niceboy

Danke Danke, will update the thread title.

Requesting similar thread for other type of discussion such as

• AI
• Hardware
• Network

Man this is why we can't have nice things

It's better than having stray threads

But those sort of threads might need different threads, this can't apply to everything. But in this case it can and would function better.

I understand your concern. For example, hardware. It's not like I'm requesting all hardware discussion holed into that thread. Rather, it should serve as the place where people who want to discuss hardware like choosing raid, network card, thermal paste, racking gears, etc among the usual cpu/ram/storage. Looking for server units? Surely it should be posted on new thread

I don't have the correct permissions for that one sir

Uh, okay. I'd raise it to admins later

I only did this one because there are multiple threads for the same thing.

niceboy

HestiaCP v1.10.5 released with more security updates!

Security

Verify user role/session has not been tampered with and fix suspended users not always having their login disabled #5706
Fix v-unsuspend-user using the wrong POLICY_USER_VIEW_SUSPENDED comparison, so unsuspending a user did not always unlock their account #5711
Improve read-only/demo mode enforcement, closing bypasses via direct URLs (e.g. /add/cron/), open redirects, and the admin login-as flow #5688
Improve conf parsing and reserved-key handling to prevent injection via crafted config values #5698

Changes

Remove support for Debian 11 (Bullseye) #5654
Bump Quick Install app versions: Dolibarr, Drupal, Grav, Joomla, OpenCart, PrestaShop #5700
Bump hestia-php to 8.5.10 #5678
Bump OpenSSL to 3.5.8 #5658
Update PCRE to 10.48 #5673
Update Roundcube to 1.7.4 #5690
Bump File Manager to 7.16.2 #5695
Enhance backup detail pages by adding icons to item types #5679
Update dependencies #5666 #5693 #5694
Add missing tests for suspending users #5710

Fixes

Fix inverted database limit check condition that could block users from creating databases within their quota #5640
Fix phpMyAdmin SSO for remote databases and redirects to the wrong server #5454
Rename phpMyAdmin tempdir configuration to load it last #5655
Fix restic full restore to restore all objects and correct cron binary name #5709
Fix backup host setup passing $raw_password instead of $password for Backblaze B2 credentials #5697
Fix issues when running behind a NAT / reverse proxy setup #5689
Implement locking mechanism for Fail2Ban actions and firewall state, and fix raw IP CIDR handling #5699
Fix ProFTPd on Debian 13 and Ubuntu 26.04 #5677
Omit CN for domains longer than 64 characters when generating SSL certificates #5676
Fix Global SMTP relay password validation #5665
Validate empty database alias #5663
Fix Apache2 logrotate when webstats fails because the domain is suspended #5685
Fix "Rejected because" DNSBL message for existing Exim installations #5683
Fix action button icons overlapping text on mobile view #5680