Webmin 2.652 and Usermin 2.551 released

News
1

Howdy all,

We’ve rolled out Webmin 2.652 and Usermin 2.551 to all Virtualmin repos.

Changes since Webmin 2.651 and Usermin 2.550:

  • Add a global per-user ACL control to block URL downloads from non-public IP addresses in File Manager, Mailboxes, and Upload and Download modules
  • Fix to recognize hex numeric HTML entities to work in various elements
  • Fix patch sub-command to reload Webmin instead of restarting, making it possible to run from Terminal module
  • Fix SSL certificate and TCP monitors to report transient connection failures as down, and SSL check timeouts as timed out, rather than uninstalled
  • Fix local file imports to enforce file access ACLs in Users and Groups, LDAP Users, MySQL/MariaDB, and PostgreSQL modules
  • Fix Webmin user switching and session checks to find sessions stored with HMAC session keys
  • Fix Usermin user switching to use one-time login URLs instead of the legacy cookie handoff and service restart flow
  • Fix APT package architecture suffix handling to avoid false package update failure reports
  • Fix missing Maildir folders to be counted as empty in Mailboxes module
  • Fix Postfix version comparisons to handle version strings safely
  • Fix SELinux labeling for Webmin and Usermin runtime data
  • Update the Authentic theme to the latest version with various improvements:
    • Fix inconsistent gaps around rounded UI elements
    • Fix CPU usage values exceeding 100% in the dashboard
    • Fix File Manager remote downloads to respect download address restrictions
    • Fix spacing in the login page welcome message
6 Likes