Browse Source

Update versions + Change log

Jaap Marcus 2 years ago
parent
commit
81d2df6b0b
4 changed files with 35 additions and 3 deletions
  1. 32 0
      CHANGELOG.md
  2. 1 1
      README.md
  3. 1 1
      src/deb/nginx/control
  4. 1 1
      src/deb/php/control

+ 32 - 0
CHANGELOG.md

@@ -2,6 +2,38 @@
 
 
 All notable changes to this project will be documented in this file.
 All notable changes to this project will be documented in this file.
 
 
+## [1.8.10] - Service release
+
+### Bug fixes
+
+- Include missed changes
+- Include <https://github.com/hestiacp/hestiacp/blob/main/install/upgrade/manual/secure_php.sh>
+
+## [1.8.9] - Service release
+
+### Security
+
+- Restrict PHP-FPM permissions to a new user to prevent permission escalation to admin or other users [CVE-xxxx-xxxxx](https://huntr.com/bounties/21125f12-64a0-42a3-b218-26b9945a5bc0/)
+- Reduce Nginx keepalive_requests to 1000 ([Nginx default](https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/#http2_max_concurrent_streams)) to limit risks of [CVE-2023-44487](https://www.cve.org/CVERecord?id=CVE-2023-44487)
+
+### Bug fixes
+
+- Fix: removing certificates during apache reload #4053
+- Fix: Firehol blacklists #4046
+- Fix PHP error + Add option to update WPCLI + Composer #4039
+- Update v-add-mail-domain #4027 #4026
+- Update MediaWikiSetup.php #4034
+- Fix: for v-list-sys-services, pidof command in Debian Buster doesn't support option -d #4022
+- Update main.php humanize_usage_size() #4015
+- Fix: Prevent the script v-add-sys-roundcube from freezing during Roundcube upgrade #4018
+- Fixed an issue with login when 2FA was enabled
+
+### Dependencies
+
+- Update Filegator to 7.9.3
+- Update Roundcube to 1.6.4
+- Update Snappymail to 2.29.1
+
 ## [1.8.8] - Service release
 ## [1.8.8] - Service release
 
 
 ### Security
 ### Security

+ 1 - 1
README.md

@@ -4,7 +4,7 @@
 
 
 <h2 align="center">Lightweight and powerful control panel for the modern web</h2>
 <h2 align="center">Lightweight and powerful control panel for the modern web</h2>
 
 
-<p align="center"><strong>Latest stable release:</strong> Version 1.8.8 | <a href="https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md">View Changelog</a></p>
+<p align="center"><strong>Latest stable release:</strong> Version 1.8.10 | <a href="https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md">View Changelog</a></p>
 
 
 <p align="center">
 <p align="center">
 	<a href="https://www.hestiacp.com/">HestiaCP.com</a> |
 	<a href="https://www.hestiacp.com/">HestiaCP.com</a> |

+ 1 - 1
src/deb/nginx/control

@@ -1,7 +1,7 @@
 Source: hestia-nginx
 Source: hestia-nginx
 Package: hestia-nginx
 Package: hestia-nginx
 Priority: optional
 Priority: optional
-Version: 1.25.2
+Version: 1.25.2-1
 Section: admin
 Section: admin
 Maintainer: HestiaCP <info@hestiacp.com>
 Maintainer: HestiaCP <info@hestiacp.com>
 Homepage: https://www.hestiacp.com
 Homepage: https://www.hestiacp.com

+ 1 - 1
src/deb/php/control

@@ -1,7 +1,7 @@
 Source: hestia-php
 Source: hestia-php
 Package: hestia-php
 Package: hestia-php
 Priority: optional
 Priority: optional
-Version: 8.2.9
+Version: 8.2.11-1
 Section: admin
 Section: admin
 Maintainer: HestaCP <info@hestiacp.com>
 Maintainer: HestaCP <info@hestiacp.com>
 Homepage: https://www.hestiacp.com
 Homepage: https://www.hestiacp.com