CloudPanel v2.5.0: Security Fixes, PHP 8.4 & MariaDB 11.4 Support

• New Features and Support

• New Translations

• Bug Fixes

• Enhancements

• Security

New Features and Support

• PHP 8.4 Support: CloudPanel v2.5.0 introduces compatibility with PHP 8.4, enabling modern syntax features and performance improvements.
• MariaDB 11.4 Support: Added support for MariaDB 11.4, delivering enhanced performance for database operations.

New Translations

This release includes new translations for Hungarian, Slovak, and Thai.

Bug Fixes

• Issue #471: Fixed an issue affecting username validation.
• Issue #476: Corrected a shebang error in the clpctl script.
• Issue #484: Addressed unexpected brackets at the beginning of certain files.
• Issue #500: Resolved an issue preventing custom cron commands from executing.
• Issue #505: Fixed a problem with file uploads in the web-based file manager.
• Issue #511: Resolved a bug causing deletion of the ``.well-known` directory after certificate renewal.
• Issue #527: Fixed an FTP login issue for newly created users (thanks to ccMatrix for contributing).
• Issue #530: Resolved a problem where file permissions reset to 0770.
• Issue #535: Addressed a limitation in the "Additional Configuration Directives" section.
• Issue #540: Added support for the Middle East (UAE) me-central-1 region for S3 backups.
• Translation Fixes: Includes improvements to translation accuracy across all supported languages.

Enhancements

• Expanded AWS Regions for S3 Backups: CloudPanel now supports additional AWS regions for remote S3 backups, ensuring broader compatibility for users globally.

Security

• Privilege Escalation from clpctlWrapper command (HIGH): Fixed a high-severity privilege escalation vulnerability related with the clpctlWrapper command.
• Privilege Escalation: Site User Access Allows Linux Password Changes (HIGH): Resolved a high-severity privilege escalation vulnerability allowing site users to change Linux passwords.
• Server IP disclosure despite using Cloudflare: Addressed a vulnerability exposing server IPs even when using Cloudflare.

We recommend all CloudPanel users update to the latest version. For more information and future updates, stay tuned to the CloudPanel blog.