1.8 Release (#3763)

* Update versions

* replace spamassassin for spamd

Use sed if release < 12 to change to spamassassin

* Disable mysql8 for bookworm

* Remove extra char

* Change php version back to 8.1

* Rename to spamd

* Update changelog

* Enable Apache2 from Sury + Update changelog

* Update version

* Fix issue with Proftpd not starting

@myvesta

* Update versions

* Update changelog

* Update version

* Update versions

* Update versions

* replace spamassassin for spamd

Use sed if release < 12 to change to spamassassin

* Disable mysql8 for bookworm

* Remove extra char

* Change php version back to 8.1

* Rename to spamd

* Update changelog

* Enable Apache2 from Sury + Update changelog

* Update version

* Fix issue with Proftpd not starting

@myvesta

* Update versions

* Update changelog

* Update version

* Update versions

* Update versions for 1.8.0 release

- Hestia Nginx and Hestia php aswell

CHANGELOG.md

@@ -2,6 +2,95 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.8.0] - Feature / Major release
+
+### Notes
+
+- Dropped support for Ubuntu 18.04 Bionic due to EOL Please upgrade to 20.04 or 22.04.
+- Custom nginx templates require some changes due to deprecated http2 parameter for the listen directive by Nginx 1.25.1 (#3684, #3704) and 0-RRT Protection introduced in (#3692)
+- Dropped support for Rainloop and replaced by Snappymail (#3590)
+
+### Features
+
+- Added support for Debian 12 (#3661)
+
+- Enhanced and Optimized TLS (#3555 @myrevery)
+- TLS 1.3 0-RTT with replay protection (#3692 @myrevery)
+- Add support for SRS in Exim >= 4.9.5 (#3197 @henri-hulski)
+- White label support and refactor translations (#3441 #3572)
+- Improve user notifications UI (#3709)
+- Continue work on UI improvements (#3700, #3693, #3691, #3685, #3682, #3680, #3672, #3668, #3662, #3659, #3651, #3634, #3629, #3628, #3619, #3615, #3608, #3606, #3602, #3600, #3598)
+- Allow option to enable/disable backup suspended users (#3696 )
+- Feature: v-dump-database (#3644)
+- Allow users to create own document error / skeleton and do not overwrite them with updating (#3622)
+- Consistent overlay styles (#3617)
+- Integrate SnappyMail (#3590)
+- Allow sorting on package name (#3726)
+- Add templates for yourls (#3755 @ediazmurillo)
+
+### Bugfixes
+
+- Fix: DNS cluster expected return code instead of string (#3706)
+- Resolve #3684 Process "http2" directive for NGINX (#3704 @myrevery)
+- Upload hestiacp.pot file directly to Crowdin (#3702)
+- Refactor add ns buttons (#3701)
+- Remove \r chars from VestaCP cron.conf (#3708 @maunklana)
+- Unable to edit password domain smtp relay (#3690)
+- Fix: #3687 Improve check if alias already exists (#3689)
+- Fixed bug in v-update-sys-ip when multiple interfaces / ip addresses are available (#3688)
+- Prevent empty ns1 / ns2 to be used (#3683)
+- Reload web server up on deleting web domain. #3705
+- Fix sed for installing sieve (#3679)
+- Tidy development docs (#3677)
+- Fix typo in v-delete-sys-filemanager (#3678)
+- Improve DNS SEC Public key information display (#3676)
+- Switch from Yarn v3 to npm (#3675)
+- Fix #3643: SOA updating on rebuild command from main server (#3660)
+- Fix: Import CPanel when account email is non existing (#3670 #3667)
+- Fix: Import CPanel when mail domain and or web domain already exists (#3670 #3667)
+- Normalize v-add-user-package input (#3671 #3669)
+- smtputf8_advertise_hosts is not supported by deb10 (#3652)
+- fix Gitea template (#3650 @asessa)
+- Fix issue with redirect to subfolder (#3623)
+- Replace current nginx template with suspended template (#3641)
+- Fix issue with duplicated phpmyadmin-auth blocks in jail.local (#3642)
+- Fix error in rebuild script (#3639)
+- Fix bug in syshealth script
+- Refactor and fixes for handling system IP/Interfaces (#3605 @myrevery)
+- Fix #3496 Fix issue with Sieve and SMTP relay (#3581 @s4069b)
+- Add jail rule for incorrect for phpmyadmin (#3596)
+- Fix #3599 Disable SMTPUTF8 (#3603)
+- Fix content shift on stats row hover (#3614)
+- Fix issue with checkbox is not selected port return "no" (#3616)
+- Encode passwords in emails send (#3566)
+- Add support for PHPmyAdmin SSO support for Mysql 8 (#3539)
+- add alias to wp-cli to the user's .bashrc and fix error handling. (#3569 @aosmichenko)
+- Simplify suspend/unsuspend dialog translations (#3565)
+- Tidy notifications copy (#3561)
+- Predefined Ipset lists not loading #3552 (#3557)
+- Minor UI fixes to server console output (#3556 @myrevery)
+- Fix #3745 Translations not loading (#3746)
+- Make IPset visible when F2B is not installed (#3750)
+- Fix: #3729 Missing robots.txt get redirected to WP (#3739) / Add WordPress Multisite subdir support (#3741 @hudokkow )
+- Fix issue with Global SMTP settings not updating (#3730)
+- Add phpbb Nginx template (#3732 #3731 @xchwarze)
+- Update Nextcloud template (#3725 @Steveorevo)
+- Fix php error when DNS disabled when updating user (#3726)
+- Fix: #3712 Unable to restore domain with custom doc root (#3726)
+- Add BIENNIALLY & TRIENNIALLY stats on TaskMonitor (#3721 @caos30)
+
+### Dependencies
+
+- Update hestia-php to 8.2.7
+- Update hestia-nginx to 1.25.1
+- Update Quick install apps versions
+
+## [1.7.8] - Service releae
+
+### Bugfixes
+
+- Fix reflected XXS in debug panel when debug mode was enabled or the user accessed directly the debug panel template. [CVE-2023-3479](https://nvd.nist.gov/vuln/detail/CVE-2023-3479)
+
 ## [1.7.7] - Service release
 
 ### Bugfixes

README.md

@@ -4,7 +4,7 @@
 
 <h2 align="center">Lightweight and powerful control panel for the modern web</h2>
 
-<p align="center"><strong>Latest stable release:</strong> Version 1.7.7 | <a href="https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md">View Changelog</a></p>
+<p align="center"><strong>Latest stable release:</strong> Version 1.8.0 | <a href="https://github.com/hestiacp/hestiacp/blob/release/CHANGELOG.md">View Changelog</a></p>
 
 <p align="center">
 	<a href="https://www.hestiacp.com/">HestiaCP.com</a> |

install/hst-install-debian.sh

@@ -15,7 +15,6 @@
 #----------------------------------------------------------#
 export PATH=$PATH:/sbin
 export DEBIAN_FRONTEND=noninteractive
-# For testing
 RHOST='apt.hestiacp.com'
 VERSION='debian'
 HESTIA='/usr/local/hestia'
@@ -32,11 +31,10 @@ HESTIA_COMMON_DIR="$HESTIA/install/common"
 VERBOSE='no'
 
 # Define software versions
-HESTIA_INSTALL_VER='1.8.0~alpha'
+HESTIA_INSTALL_VER='1.8.0'
 # Dependencies
 multiphp_v=("5.6" "7.0" "7.1" "7.2" "7.3" "7.4" "8.0" "8.1" "8.2")
-#deb.sury not yet ready
-fpm_v="8.2"
+fpm_v="8.1"
 mariadb_v="10.11"
 
 # Defining software pack for all distros
@@ -48,7 +46,7 @@ software="acl apache2 apache2-suexec-custom apache2-suexec-pristine apache2-util
   php$fpm_v php$fpm_v-apcu php$fpm_v-bz2 php$fpm_v-cgi php$fpm_v-cli php$fpm_v-common php$fpm_v-curl php$fpm_v-gd
   php$fpm_v-imagick php$fpm_v-imap php$fpm_v-intl php$fpm_v-ldap php$fpm_v-mbstring php$fpm_v-mysql php$fpm_v-opcache
   php$fpm_v-pgsql php$fpm_v-pspell php$fpm_v-readline php$fpm_v-xml php$fpm_v-zip postgresql postgresql-contrib
-  proftpd-basic quota rrdtool rsyslog spamassassin sudo sysstat unrar-free unzip util-linux vim-common vsftpd xxd whois zip zstd"
+  proftpd-basic quota rrdtool rsyslog spamd sudo sysstat unrar-free unzip util-linux vim-common vsftpd xxd whois zip zstd"
 
 installer_dependencies="apt-transport-https ca-certificates curl dirmngr gnupg openssl wget"
 
@@ -325,9 +323,12 @@ if [ "$mysql" = 'yes' ] && [ "$mysql8" = 'yes' ]; then
 	mysql='no'
 fi
 
-if [ "$mysqlclassic" = 'yes' ] && [ "$architecture" = 'aarch64' ]; then
+if [ "$mysql8" = 'yes' ] && [ "$architecture" = 'aarch64' ]; then
 	check_result 1 "Mysql 8 does not support ARM64 yet for Debian please use Ubuntu. Unable to continue"
 fi
+if [ "$mysql8" = 'yes' ] && [ "$release" = '12' ]; then
+	check_result 1 "Mysql 8 does not support Bookworm yet for Debian Unable to continue"
+fi
 
 # Checking root permissions
 if [ "x$(id -u)" != 'x0' ]; then
@@ -718,15 +719,9 @@ curl -s https://packages.sury.org/php/apt.gpg | gpg --dearmor | tee /usr/share/k
 
 # Installing sury Apache2 repo
 if [ "$apache" = 'yes' ]; then
-	if [ "$release" != '12' ]; then
-		echo "[ * ] Apache2"
-		echo "deb [arch=$ARCH signed-by=/usr/share/keyrings/apache2-keyring.gpg] https://packages.sury.org/apache2/ $codename main" > $apt/apache2.list
-		curl -s https://packages.sury.org/apache2/apt.gpg | gpg --dearmor | tee /usr/share/keyrings/apache2-keyring.gpg > /dev/null 2>&1
-	else
-		echo "[ * ] Apache2"
-		echo "#deb [arch=$ARCH signed-by=/usr/share/keyrings/apache2-keyring.gpg] https://packages.sury.org/apache2/ $codename main" > $apt/apache2.list
-		curl -s https://packages.sury.org/apache2/apt.gpg | gpg --dearmor | tee /usr/share/keyrings/apache2-keyring.gpg > /dev/null 2>&1
-	fi
+	echo "[ * ] Apache2"
+	echo "deb [arch=$ARCH signed-by=/usr/share/keyrings/apache2-keyring.gpg] https://packages.sury.org/apache2/ $codename main" > $apt/apache2.list
+	curl -s https://packages.sury.org/apache2/apt.gpg | gpg --dearmor | tee /usr/share/keyrings/apache2-keyring.gpg > /dev/null 2>&1
 fi
 
 # Installing MariaDB repo
@@ -881,6 +876,10 @@ fi
 # Excluding packages
 software=$(echo "$software" | sed -e "s/apache2.2-common//")
 
+if [ $release -lt 12 ]; then
+	software=$(echo "$software" | sed -e "s/spamd/spamassassin/g")
+fi
+
 if [ "$apache" = 'no' ]; then
 	software=$(echo "$software" | sed -e "s/apache2 //")
 	software=$(echo "$software" | sed -e "s/apache2-bin//")
@@ -916,6 +915,7 @@ if [ "$clamd" = 'no' ]; then
 fi
 if [ "$spamd" = 'no' ]; then
 	software=$(echo "$software" | sed -e "s/spamassassin//")
+	software=$(echo "$software" | sed -e "s/spamd//")
 fi
 if [ "$dovecot" = 'no' ]; then
 	software=$(echo "$software" | sed -e "s/dovecot-imapd//")
@@ -1557,6 +1557,11 @@ if [ "$proftpd" = 'yes' ]; then
 			systemctl enable proftpd
 		fi
 	fi
+
+	if [ "$release" -eq 12 ]; then
+		systemctl disable --now proftpd.socket
+		systemctl enable --now proftpd.service
+	fi
 fi
 
 #----------------------------------------------------------#
@@ -1900,9 +1905,9 @@ if [ "$spamd" = 'yes' ]; then
 		# Deb 12+ renamed to spamd
 		update-rc.d spamd enable > /dev/null 2>&1
 		systemctl start spamd >> $LOG
-		unit_files="$(systemctl list-unit-files | grep spamassassin)"
+		unit_files="$(systemctl list-unit-files | grep spamd)"
 		if [[ "$unit_files" =~ "disabled" ]]; then
-			systemctl enable spamassassin > /dev/null 2>&1
+			systemctl enable spamd > /dev/null 2>&1
 		fi
 
 	fi

install/hst-install-ubuntu.sh

@@ -31,7 +31,7 @@ HESTIA_COMMON_DIR="$HESTIA/install/common"
 VERBOSE='no'
 
 # Define software versions
-HESTIA_INSTALL_VER='1.8.0~alpha'
+HESTIA_INSTALL_VER='1.8.0'
 # Dependencies
 multiphp_v=("5.6" "7.0" "7.1" "7.2" "7.3" "7.4" "8.0" "8.1" "8.2")
 fpm_v="8.1"

install/upgrade/upgrade.conf

@@ -53,7 +53,7 @@ pga_v='7.14.4'
 rc_v='1.6.2'
 
 # Set version of SnappyMail (Webmail) to update during upgrade if not already installed
-sm_v='2.28.3'
+sm_v='2.28.4'
 
 # Update the File Manager or it's configuration file
 # Check if Filegator requires an update based on current version and setting below

package.json

@@ -1,7 +1,7 @@
 {
 	"name": "hestia",
 	"private": true,
-	"version": "1.8.0~alpha",
+	"version": "1.8.0",
 	"description": "An open-source Linux web server control panel.",
 	"repository": "https://github.com/hestiacp/hestiacp",
 	"license": "GPL-3.0-or-later",

src/deb/hestia/control

@@ -1,7 +1,7 @@
 Source: hestia
 Package: hestia
 Priority: optional
-Version: 1.8.0~alpha
+Version: 1.8.0
 Section: admin
 Maintainer: HestiaCP <info@hestiacp.com>
 Homepage: https://www.hestiacp.com

src/deb/nginx/control

@@ -1,7 +1,7 @@
 Source: hestia-nginx
 Package: hestia-nginx
 Priority: optional
-Version: 1.25.1
+Version: 1.25.1-1
 Section: admin
 Maintainer: HestiaCP <info@hestiacp.com>
 Homepage: https://www.hestiacp.com

src/deb/php/control

@@ -1,7 +1,7 @@
 Source: hestia-php
 Package: hestia-php
 Priority: optional
-Version: 8.2.6
+Version: 8.2.8
 Section: admin
 Maintainer: HestaCP <info@hestiacp.com>
 Homepage: https://www.hestiacp.com

src/rpm/hestia/hestia.spec

@@ -2,7 +2,7 @@
 %global _hardened_build 1
 
 Name:           hestia
-Version:        1.8.0~alpha
+Version:        1.8.0
 Release:        1%{dist}
 Summary:        Hestia Control Panel
 Group:          System Environment/Base
@@ -152,4 +152,4 @@ fi
 - HestiaCP RHEL 9 support
 
 * Thu Jun 25 2020 Ernesto Nicolás Carrea <equistango@gmail.com> - 1.2.0
-- HestiaCP CentOS 8 support
+- HestiaCP CentOS 8 support

src/rpm/nginx/hestia-nginx.spec

@@ -7,7 +7,7 @@
 
 
 Name:           hestia-nginx
-Version:        1.25.1
+Version:        1.25.1-2
 Release:        1%{dist}
 Summary:        Hestia internal nginx web server
 Group:          System Environment/Base
@@ -82,4 +82,4 @@ mv %{buildroot}/usr/local/hestia/nginx/sbin/nginx %{buildroot}/usr/local/hestia/
 - new init script
 
 * Wed Jun 27 2012 Serghey Rodin <builder@vestacp.com> - 0.9.7-1
-- initial build
+- initial build

src/rpm/php/hestia-php.spec

@@ -2,7 +2,7 @@
 %global _prefix         /usr/local/hestia/php
 
 Name:           hestia-php
-Version:        8.2.6
+Version:        8.2.8
 Release:        1%{dist}
 Summary:        Hestia internal PHP
 Group:          System Environment/Base