Webmin 2.641 and Usermin 2.540 released

Howdy all,

We’ve rolled out Webmin 2.641 and Usermin 2.540 to all Virtualmin repos.

Changes since Webmin 2.640:

  • Add support for trusted proxy IP addresses
  • Fix a bug when editing monitors in the System and Server Status module
  • Fix skip hwclock when unavailable #2693

Changes since Webmin 2.630 and Usermin 2.530:

  • Add new nftables module with profiles, saved tables, and chains/sets management
  • Add new Nginx module with look and feel matching the Apache module
  • Add option to hide sensitive values (like passwords or tokens) from Webmin’s request logs
  • Add custom ACME server support for Webmin SSL renewal
  • Add support for the latest MariaDB on Ubuntu 26.04
  • Add multi-statement SQL query support when executing inline in MySQL/MariaDB module
  • Add support for ext4 hidden inode quota mode
  • Add used space and usage percentage reporting for ZFS in the dashboard
  • Add mass enable and disable buttons for status monitors in the System and Server Status module
  • Update tiny ACME client to the latest version
  • Update DHCP default config for openSUSE 16 #2678
  • Fix to prevent bypassing two-factor authentication in RPC requests
  • Fix session cookies to use safer defaults
  • Fix handling of connections coming through a reverse proxy
  • Fix unsafe mailbox attachment handling in Mailbox module
  • Fix unsafe decoding of Outlook winmail.dat attachments
  • Fix Certbot standalone port conflicts
  • Fix to correctly preserve full quoted action parameters in the Fail2Ban jail editor #2647
  • Fix Fail2Ban default jail options to preserve required timing defaults when saving
  • Fix ZFS to fall back to df when disk space cannot be computed from zpool
  • Fix to allow toggling process priority and I/O controls on or off
  • Fix issue where disabled email notifications were still being processed
  • Fix key signing with modern GnuPG in Usermin
  • Update Authentic theme to the latest version with various improvements and fixes:
    • Upgrade stats history graphs from laggy SVG to a blazing-fast canvas renderer
    • Add option to control corner roundness for the menu, content area and right-side slider
    • Change the content area to use rounded corners and a margin by default
    • Fix message of the day display in login page correctly webmin#2555
    • Fix tooltip visibility in dark palette
    • Fix session login button spinner
    • Fix various button styling issues (active state, tiny buttons, airy buttons, stack position)
3 Likes

Note that if you’re using Webmin behind a proxy, you should upgrade and configure the trusted proxy IP, ASAP. It is a security issue to have Webmin not know exactly what proxy is allowed to talk to it. Also use SSL between the proxy and Webmin.

Thank you very much for the update, for every update and for everything you offer. :smiling_face_with_three_hearts:

I have: Ubuntu Server LTS Pro 24.04.4 | Webmin 2.630 | Usermin 2.530 | Virtualmin 8.1.0 GPL | Authentic theme 26.30
The applications are all fully updated.
I upgraded to Ubuntu 24.04 a few days ago and everything works amazingly.
I just had to follow some instructions I found on the forum and everything is as if I never had Ubuntu 22.04.
(And luckily I upgraded, because I had been on 22.04 for 5 years and I was tired of it.
I also wanted to have the next version 10.11 of Mariadb. 10.6 was about to expire.
But I didn’t mind that much since I have the Pro version of Ubuntu.)

I want to ask for some information.
How are updates offered for Webmin / Virtualmin?
Why doesn’t the latest version appear immediately in the dashboard?
This is not the right repo?
virtualmin/main Yes https://software.virtualmin.com/vm/7/gpl/apt

I’m in no hurry for the answer.
I’ll see it sometime in the near future, I’m sure
:slight_smile:

1 Like

There are new repos, but there is no rush to switch to the Virtualmin 8 repos. The vm7 repos have the Webmin and Usermin updates, they should show up in your dashboard shortly.

2 Likes

Thank you very much for the prompt response.
I’ll wait for the updates. Great.
And I looked a little better in the forum and found this answer of yours that covered me completely.

Yes, the new updates actually appeared on the dashboard 12 hours after they were released to the public. So, very soon! On the same day!

Just asking if I did it right: I guess installed the nftables module manually from:

by copying the url and enter it into Webmin > Webmin Configuration > Webmin Modules > Install from http

Small remark: Would be nice to have a list of installed modules in this section.

If you have the latest Virtualmin repositories, you should just run apt-get install webmin-nftables or dnf install webmin-nftables to install it, instead of downloading it from the Webmin website. Also, if you have the full version of Webmin installed, the module is already included.

OK, thanks. I hardly ever look to the modules section. I looked at a list in the webmin configuration > Modules > Export section (i can’t find a modules list anywhere else) and saw no nftables item, so installed it.

I see a “Linux firewall” item now, so overlooked that. The download is called "nftables"Does reinstalling mess things up? Did I install something else that should not be there? Not a big problem as I am testing a new install without anything critical on it.

You should always use your system package manager, when possible.

Also, please make new topics for questions, rather than tacking on to unrelated topics.

https://forum.virtualmin.com/guidelines

I probably misunderstood the instructions, but I downloaded the module from there, because the download page told me so:

Ilia should update the documentation to cover the weird new minimized Webmin, I guess, though that Webmin package is only found in Virtualmin repos.

But, it’s always true that you should use your system package manager when possible. Most open source software doesn’t try to keep up with which distributions have packaged their app and may provide generic installation instructions (building from source or npm/npx or pypi), but if you can get it from your system package manager that’s always what you should do, absent a very strong reason not to.

2 Likes

Yes, I agree. I will look into doing that! Thanks for pointing this out!

1 Like