- Add support for importing schemas to the LDAP Server module
- Add support for displaying disk and network I/Os in FreeBSD on the dashboard
- Fix to automatically set the WebSocket URL webprefix correctly
- Fix to name downloaded backup file nicely in Backup Configuration Files module #2239
- Fix to optimize getting table index stats for large tables in MySQL/MariaDB module pull#2234
- Fix duplication of systemd actions and init scripts #2227
- Fix BIND service name for Debian 12 and Ubuntu 24.04
- Update the Authentic theme to the latest version with various fixes and improvements
- Fix real-time monitoring not updating graphs in the Dashboard #2222
- Fix Terminal module to work correctly with sudo-capable users #2223
- Add support for blocking a given IP temporarily or permanently in the FirewallD module
- Add support for parsing iCalendar event files in the Mailbox module
- Add support for tailing logs in real time in System Logs module
- Add ability to preserve original file ACLs when writing files webmin/authentic-theme#1511
- Add a
patch
sub-command to thewebmin
command for easy application of patches - Add a config option to display hostname and comment in the DHCP Server module #2221
- Add support for ED25519 and ED448 algorithms in BIND DNS module for DNSSEC
- Add support for larger ranger of authentication methods in Dovecot module
- Add improved support for displaying last logins in the Users and Groups module
- Fix to prevent duplicate
also-notify
andallow-transfer
IPs in the BIND DNS module - Fix issues with Terminal module to correct text display problems in editor mode
- Fix to store Terminal module logs in the
/var/webmin
directory - Fix to display the Spam folder nicely in the Mailbox module
- Fix how modules are loaded in ProFTPd module
- Fix support for the Chrony service on Debian systems in the System Time module
- Fix to use static routes to set the default gateway in Network Configuration module
- Fix to correctly invalidate EOL cache on re-checks #2139
- Fix to change default monitor name based on database used MariaDB vs MySQL #2139
- Fix to disable manual upgrades for systems installed from the repository
- Fix to preserve Webmin service state during package upgrades #2133
- Change to enforce sudo-capable logins as themselves in the Terminal module docs/modules/terminal
- Rename "System Logs" module to "System Logs RS" and "System Logs Viewer" to "System Logs" for clarity
- Fix EOL detection for unreleased Linux distributions
- Add an API to check if the system is running or approaching its end of life (EOL)
- Add support for
systemd-timesyncd
andchronyd
to the System Time module - Add Ubuntu 24.04 support
- Add Squid 6 support
- Add latest Devuan Linux support
- Add an option to request Let's Encrypt certificates using
certbot
in standalone mode forum.virtualmin.com/t/123696 - Add IMAP and SMTP monitors in the System and Server Status module
- Fix TLS connection to SMTP servers not working in some cases
- Fix ProFTPd module to use actual UI library
- Fix to using the
qrencode
command to generate QR codes locally instead of the remote Google Chart API - Fix a number of various other issues
- Fix param to read only headers sourceforge.net/usermin-bugs#501
- Fix not to set
reuse
flag on initial Let's Encrypt request - Fix to correctly escape mail file names upon deletion
- Fix index field in cache file in BIND DNS module
- Add support for numbered and bulleted lists in email HTML editor
- Add ability to display active file locks in
Webmin Configuration ⇾ File Locking
page - Fix hostname detection on
systemd
systems to avoid excessive logging #2020 - Fix Webmin version display #2023
- Fix to check if UI library is loaded before using it #2021
- Fix the absent init script for legacy systems after the initial installation
- Update the Authentic theme to the latest version with various fixes and improvements
- Add support for hostname detection using
hostnamectl
command - Add support for other ACME services
- Add ability to hide dotfiles in File Manager #1578
- Add
xz
,zstd
and plaintar
support when creating archives in File Manager #2009 - Add support for English (United States) (military time) locale
- Fix to correctly switch key hash type with ACME services
- Fix bug when
backend
wasn't saved correctly in Fail2Ban module #1992 - Fix large files download in Upload and Download module
- Fix Google Authentication on RHEL systems derivatives
- Update the Authentic theme to the latest version with various fixes and improvements
- Add support for Amazon Linux 2023
- Fix a bug in Network Configuration module when parsing network size sourceforge.net/discussion#55377
- Fix Netplan related bugs in Network Configuration module
- Fix Terminal focus bug
- Fix to correctly compare Webmin semantic versions
- Fix to suppress output from
monitor.pl
command #1984
- Add support for reading gzipped email messages
- Add
error_stderr
API - Fix to show correct locale for sudo-capable users webmin/authentic-theme#1663
- Fix new signing key import on Debian and derivatives
- Fix to check if password hash format is valid for
yescrypt
andSHA512
- Fix various XSS related issues
- Fix updating Webmin from repository if a package is available
- Add support for showing defaults for options in PHP Configuration module
- Add significant improvements to email display, reply and compose
- Add support for WebGL in the Terminal module
- Add screen reader support in Terminal module
- Add full support for NetworkManager in Network Configuration module
- Fix correctly displaying bridges with Netplan in Network Configuration module
- Fix displaying active network interfaces in Network Configuration module
- Fix to consider current drive temperature in
smartctl
output #1881 - Fix to properly stop Usermin webmin/usermin#89
- Fix no to add hashed password to the old password list if it's already in there https://github.com/virtualmin/virtualmin-pro/issues/35
- Fix displaying placeholder on input to reflect strftime-style format
- Update the Authentic theme to the latest version adding new vertical column layout
- Add ability to set locale in Webmin Users module for consistency
- Fix an error when
make_date
is called on undefined value #1860 - Fix clearing packages caches before checking for updates in status collection #1863
- Update the Authentic theme to the latest version
- Add full locale support
- Add slave zone file format option in BIND DNS module
- Add support for editing ACLs in File Manager
- Add support to configure SSL connection for MySQL/MariaDB module
- Add support for compressed backups in PostgreSQL module
- Add support for displaying inodes too in Disk Usage in the Dashboard
- Add better support for CloudLinux
- Fix to always default to RSA key type in Let's Encrypt requests
- Fix setup repository script for Oracle
- Fix shutdown timeout to avoid termination of running processes
- Fix support for SpamAssassin 4
- Fix to use system default hashing format for
htpasswd
file - Fix FastRPC issues
- Update the Authentic theme to the latest version, with sped-up Dashboard performance
- Fix Authentic theme issue with error handling
- Fix Framed theme to respect selected mode in left menu
- Fix search bar in left menu in Framed theme
- Fix to set the correct algorithm when setting up RNDC #1817
- Fix the loop bug when sourcing other network configs in Debian
- Fix to include all Debian network config files in backups
- Fix to stop doing expensive package re-fetch on upgrades
- Add support for defining hostname for WebSocket connection
- Add Debian 12 support
- Add ability to set shell character encoding and set
TERM
environmental variable in the new Terminal module - Add support for editing network interfaces in include files for Debian systems
- Add various improvements to the old good Framed Theme
- Fix to change Gray Framed Theme name to Framed Theme
- Fix to verify and close WebSocket session, if parent session was closed
- Fix to remove
RC4
from the list of strong ciphers - Fix don't fail LDAP user or group deletion, if they have already been deleted
- Fix error handling in MySQL/MariaDB Database server module when executing SQL commands
- Fix adding an extra server attachment field and other bugs in Read User Mail module
- Fix the link to release notes for Rocky Linux
- Fix issues with freezing and thawing dynamic reverse zones in BIND DNS Server module
- Fix bugs for modules granting anonymous access
- Fix
mailbox_idle_check_interval
option related bugs in Dovecot module sourceforge.net#5602 - Fix to use correct extension for package file when upgrading Webmin webmin/authentic-theme#1633
- Update the Authentic theme to the latest version
- Add a new Terminal module (interactive shell)
- Add a new
setup-repos.sh
script to setup Webmin repos - Add to replace old Gray Theme with Virtualmin Framed Theme
- Add systemd improvements
- Add proper support for openSUSE Leap and Tumbleweed
- Add Linux Lite support
- Fix connecting to external IPv6 LDAP server
- Fix self-signed certificate generation
- Fix setting hostname using
hostnamectl
command on systemd systems - Fix to exclude sensors with unknown temperatures
- Fix for FreeBSD to support Let's Encrypt certificates requests
- Fix to support attachment filenames with slash in them
- Fix missing origins and action for direct rules in FirewallD module
- Removed the need for a full restart when updating SSH keys
- Improved the Javascript for redirects to HTTPS
- Add to enforce HTTP Strict Transport Security (HSTS) policy in SSL enabled mode
- Add better
http
tohttps
redirects when SSL is enabled - Add support for installing multiple versions of Webmin on
systemd
systems - Add support for AMD CPU thermisters #1714
- Add better support for Webmin minor (release) versions upgrades
- Add Webmin and Usermin configuration modules display minor (release) version
- Add Mint Linux support
- Add latest Authentic 20.00 theme update with number of bug fixes
- Fix to also restart dependent services (i.e.
fail2ban
) uponfirewalld
restart - Fix to preserve service state for Webmin and Usermin upon package upgrades (i.e. don't start stopped)
- Fix Bind module config incorrectly updated upon Webmin upgrades on CentOS 7
- Fix to allow IPv6 addresses for slaves in BIND module
- Fix to send
HUP
signal on reload withsystemd
- Fix icons in Servers Index module for newer distros (Alma and Rocky)
- Fix to remove depricated option
UsePrivilegeSeparation
with OpenSSH 7.5+ - Fix Oracle Linux support
- Fix Ubuntu release notes links
- Add Webmin release note message
- Add latest Authentic theme update with number of bug fixes
- Fix Apache, BIND, MySQL, ProFTPd and other modules configs on newest distros for new installs
- Fix to use Cron default path when run from UI
- Fix post uninstall cleanups
- Fix version detection bug for Log File Rotation module
- Add improvements to Partitions on Local Disks module
- Add better support for CentOS Stream Linux for new installs
- Add improvements for searching and naming global PHP configs files
- Add support for unix extensions option for Samba module #1695
- Add latest Authentic theme update with various bug fixes and small improvements
- Add support for mirror and RAID volumes in LVM module
- Add latest Authentic theme update with nice new features in File Manager and other fixes
- Fix more issues with restart when Webmin is upgraded from UI
- Fix issues with
systemd
restarting Webmin on upgrade found in 1.995
- Add improvements to stability for
systemd
systems - Add native support to default to system default hashing format
- Add support to
yescrypt
password hashing scheme - Add new System Logs Viewer (logviewer) module
- Add new
webmin server
sub-command - Add to set environmental variables in Filesystem Backup module
- Fix upload tracker issues with large uploads
- Fix NVMe drives status support
- Fix AlmaLinux support
- Fix BIND config for FreeBSD 12 on initial setup
This release fixes a security issue in versions 1.991 and below. All systems with less-privileged Webmin users are recommended to upgrade as soon as possible.
This is mainly a bugfix release for issues found since 1.990.
This release contains a critical security fix, an updated theme, and a bunch of other small features and improvements. We recommend that all systems with untrusted Webmin users upgrade immediately!
This release is mostly bugfixes for issues found in 1.983.
These releases are mostly bugfixes for issues found in 1.982.
This release includes the latest Authentic theme, support for archive extraction and folder uploads in the File Manager module, automatic formatting of the Apache config, translation updates, and many more small features and bugfixes.
This is just a bugfix for issues found in version 1.980.
This release includes numerous small bugfixes, a theme update, translation fixes, support for Rocky and Alma Linuxes, and a new API for changing password.
This release fixes several bugs found in 1.974, updates the Authentic theme, adds 2FA support in Usermin, and fixes a security bug in the Network Configuration module.
Mostly a bugfix release, but it also contains a security for users who installed using the setup.pl
script (which is not common).
This is mainly a bugfix release for issues with Let's Encrypt and a few other modules.
This release updates the theme, fixes a Windows security issue, updates the CA cert for Let's Encrypt, and improves translations.
These are bugfix releases for 2-factor signin and other small issues.
This release improves MySQL user management, updates the theme UI, fixes parsing of complex Netplan configs, removes the dependency on apt-show-versions and much much more.
This release adds automatic translations for all languages in UTF-8, updates the Authentic theme, adds support for Postfix SNI certs and Chrony, caching for LDAP lookups, and a huge number of bugfixes and minor features.
This release updates the built-in Let's Encrypt client, adds support for creating "safe-mode" Webmin users, support for CAA records in the BIND module, and the ability to search Postfix maps. It also updates the Authentic theme to the latest version, which includes numerous improvements to the File Manager and overall UI.
These updates fix a security vulnerability and should be installed IMMEDIATELY by all users. Although it is not exploitable in a Webmin install with the default configuration, upgrading is strongly recommended.
This update includes the latest theme version, translation updates, the ability to disable hosts file entries, easier monitoring of bootup actions, and a bunch of bugfixes.
This release includes theme and translation updates, a page for editing package repositories, cron and status module improvements, and a bunch of other bugfixes and small improvements.
This version includes wildcard Let's Encrypt SSL cert support, theme and translation updates, support for announcements to Webmin users, and a bunch of other bugfixes and small improvements.
This version includes Ubuntu 18 network config support, translation updates, multiple theme and file manager updates, BIND freeze/thaw support, support for more Linux distributuions, and a bunch of other bugfixes and small improvements.
This version includes German, Catalan and Bulgarian translation updates, a new version of the Authentic theme, support for directly editing the MySQL and PostgreSQL config files, Let's Encrypt bugfixes, more control over system status email notifications, and more.
This release includes many translation updates, fixes for Let's Encrypt support, UI cleanups, and most importantly a new major version of the Authentic theme.
This release includes Let's Encrypt DNS fixes, Majordomo module improvements, XSS security bugfixes, translation updates, a new version of the theme, and more.
This release includes Let's Encrypt fixes, Majordomo module improvements, FirewallD forwarding support, translation updates, an update to the Authentic theme, and a bunch of other bugfixes.
This major release includes a large theme update, XSS security fixes, per-domain SSL cert support, thin-provisioned LVM support, Let's Encrypt improvements, translation updates, and the usual gang of bugfixes. Also available is Usermin 1.710, which contains many of the same updates.
This is mainly a bugfix release, but also contains some translation updates, the latest version of the Authentic theme, fixes related to Let's Encrypt and LDAP client support, and SElinux and file attribute support in the file manager.
This updated includes a bunch of bugfixes (particularly in the BIND module), translation updates, the ability to download a MySQL backup, Let's Encrypt improvements, and more.
This updated includes the latest Authentic theme, a new IPv6 Firewall module for Linux, Webmin actions logging improvements, Let's Encrypt API fixes and a bunch of other small updates and bugfixes.
- German translation updates, thanks to Raymond Vetter.
- Catalan translation updates from Jaume Badiella.
- Bulgarian translations from Grigor Gatchev.
- Added Support for Synology NAS and opkg/ipkg Community Package Manager, Kay Marquardt
- Added Support for configuring spam filtering when amvisd is used, Kay Marquardt
- Added a recent logins section to the System Information page.
- Major rework of majordomo module, Kay Marquardt
- For new installs, switched the location of data files in many modules to /var/webmin instead of /etc/webmin.
- Norwegian updates, thanks to Stein-Aksel Basma.
- Catalan translation updates from Jaume Badiella.
- More German translation updates, thanks to Raymond Vetter.
- Fixed an XSS bug that allowed xmlrpc.cgi to be abused by a malicious link.
- Norwegian updates, thanks to Stein-Aksel Basma.
- Catalan translation updates from Jaume Badiella.
- More German translation updates, thanks to Raymond Vetter.
- More German translation updates, thanks to Raymond Vetter.
- Norwegian updates, thanks to Stein-Aksel Basma.
- The awesome new Authentic Theme by @iliajie is now included in the Webmin package.
- Catalan translation updates from Jaume Badiella.
- Deprecated the old blue-theme in favor of the new gray-theme.
- Catalan translation updates from Jaume Badiella.
- More German translation updates, thanks to Raymond Vetter.
- SSL v2 and v3 are now disabled by default at Webmin install time, to block the POODLE attack. They can be re-enabled on the SSL Encryption page of the Webmin Configuration module.
- More German translation updates, thanks to Raymond Vetter.
- Catalan updates, thanks to Jaume Badiella.
- Added additional protected against Shellshock exploits made via the Webmin webserver.
- More German translation updates, thanks to Raymond Vetter.
- Support for RHEL 7, CentOS 7 and other derivatives in multiple modules.
- More German translation updates, thanks to Raymond Vetter.
- Norwegian updates, thanks to Stein-Aksel Basma.
- Catalan updates, thanks to Jaume Badiella.
- Security fixes for XSS attacks in
user_chooser.cgi
and other scripts.
- More German translation updates, thanks to Raymond Vetter.
- Norwegian updates, thanks to Stein-Aksel Basma.
- Catalan updates, thanks to Jaume Badiella.
- IPv6 access control now match an address exactly, unless a network size is entered.
- FTP uploads and downloads to IPv6-only servers now work properly, thanks to support for the EPSV protocol command.
- Added a Bahasa Malaysia translation, thanks to Nawawi Jamili, Nizam Adnan and Weldan Jamili.
- Added filtering for lists in the user, group and file chooser popups, thanks to a patch from Nawawi Jamili.
- More German translation updates, thanks to Raymond Vetter.
- Norwegian updates, thanks to Stein-Aksel Basma.
- More German translation updates, thanks to Raymond Vetter.
- Polish translation updates from Piotr Kozica.
- Norwegian updates, thanks to Stein-Aksel Basma.
- Improved FreeBSD 8 and 9 support across multiple modules.
- Hungarian translation updates from Balázs Zoltán.
- Norwegian updates, thanks to Stein-Aksel Basma.
- Catalan updates, thanks to Jaume Badiella.
- Yet more German translation updates, thanks to Raymond Vetter.
- Polish translation updates from Piotr Kozica.
- Even more German translation updates, thanks to Raymond Vetter.
- Catalan updates, thanks to Jaume Badiella.
- Even more German translation updates, thanks to Raymond Vetter.
- Norwegian updates, thanks to Stein-Aksel Basma.
- Dutch translation updates, thanks to Gandyman.
- Switch order of command and mode in debug logs to make it clear that "mode=X" is part of the log, not part of the command.
- Added the new Gray Framed Theme, and made it the default for new installs.
- Even more German translation updates, thanks to Raymond Vetter.
- More Dutch updates, thanks to Gandyman.
- Catalan updates, thanks to Jaume Badiella.
- Norwegian updates, thanks to Stein-Aksel Basma.
- All languages now have UTF-8 encoded variants, as well as their native character sets.
- Added support for Ubuntu 12.04.
- Even more German translation updates, thanks to Raymond Vetter.
- Added UTF-8 encodings for languages using the iso-8859-2, like Czech and Polish.
- Catalan updates, thanks to Jaume Badiella.
- Norwegian translation updates, thanks to Stein-Aksel Basma.
- The MySQL, PostgreSQL, Filesystem Backup and Backup Configuration Files modules now all support the use of Webmin variable substitutions in backup paths (like $HOSTNAME) via a new Module Config option.
- More German translation updates, thanks to Raymond Vetter.
- More French translation updates, thanks to ButterflyOfFire.
- Catalan updates, thanks to Jaume Badiella.
- Italian translation updates, thanks to Andrea Oliveri.
- Major German translation updates, thanks to Raymond Vetter.
- Speed up the loading of language files by pre-caching them in memory when Webmin is started, and not performing sub-string substitutions in most modules.
- Added support for Pardus Linux, thanks to Kaan Ozdincer.
- Major Dutch updates, thanks to Gandyman.
- Majoe French translation update, thanks to ButterflyOfFire.
- Allow per-language language overrides to be defined, in custom-lang.$code files.
- Updated numerous modules to improve support for Debian 6 and Ubuntu 10.10.
- If a browser asks for gzip compression, Webmin can now return compressed content either generated dynamically or from a pre-compressed .gz file in the same directory. Dynamic compression depends on the Compress::Zlib perl module.
- Added support for Amazon Linux.
- Catalan translation updates by Jaume Badiella.
- Dutch translation updates, thanks to Gandyman.
- Polish translation updates, thanks to Dariusz Dêbowski.
- Czech translation updates, thanks to Karel Hudan.
- The Webmin RPM now preserves the /etc/webmin directory when un-installed and then re-installed.
- Added a robots.txt file to block indexing of Webmin by search engines.
- The Webmin search box can now be disabled in the Webmin Users module, under "Permissions for all modules".
- Brazillian Portuguese translation updates for several modules, thanks to Djavan Fagundes.
- Catalan translation updates by Jaume Badiella.
- Dutch translation updates, thanks to Gandyman.
- Beginnings of a Basque translation, thanks to Mireia Lezea.
- Catalan translation updates by Jaume Badiella.
- Added an UTF-8 encoding of the Russian translation, thanks to [email protected].
- French translation updates by ButterflyOfFire.
- Dutch translation updates by Gandyman.
- Dramatically improved Webmin's search function, to include links to pages that help or UI text comes from. Also changed the layout of results to a more Webmin-ish style.
- Added a language option for UK english, and converted words in the default Webmin language to US english.
- Major Dutch translation updates, thanks to Gandyman.
- Catalan translation updates by Jaume Badiella.
- Converted all core modules to use the new WebminCore perl module instead of
web-lib.pl
. This significantly improves memory use and load time in code that uses functions from multiple modules, asssuming they have all been converted.
- Russian translation updates, thanks to Anton Statutov.
- Webmin's serialization functions can now handle objects, which allows them to be passed as parameters to remote function calls. Both caller and recipient must have the object's class installed though.
- Converted commands in the core
web-lib-funcs.pl
API file to POD format, and added more details about each function.
- A large Croatian translation update, thanks to Domagoj Bikic.
- When a user whose password is close to expiry or has already expired logs in, a warning will be displayed on Webmin's first page.
- Many Japanese translation updates, thanks to Kazuya Masuda.
- Many Greek translation updates, thanks to Vagelis Koutsomitros.
- Catalan translation updates by Jaume Badiella.
- Many Dutch translation contributions by Gandyman.
- Many Korean updates, thanks to JoungKyun Kim.
- More Dutch updates, thanks to Gandyman.
- Added a debugging log file, which records all files read and written, commands run and more. This can be enabled in the Webmin Configuration module.
- Big Czech translation updates, thanks to Petr Vanek and the Czech translation team.
- All popups in Webmin are now XSS-safe, and thus do not need protection from unknown referers which prevented them from working in some browsers.
- All Webmin session IDs are now stored MD5 hashed, to prevent sessions from being captured if the sessiondb DBM is somehow read by an attacker.
- Many Dutch updates, thanks to Gandyman.
- MD5 encryption for Webmin and Unix passwords can be used on systems that have either the MD5 or Digest::MD5 perl module, or support it in the crypt() function.
- Links from unknown referers are now blocked by default, to prevent XSS attacks. This may break browsers that don't supply a Referer: HTTP header.
- Added a search box to the left frame of the blue theme, for finding modules, config options, help pages and text.
- All images, CSS and other static content served by Webmin has an HTTP Expires for 1 week in the future, to improve cachability.
- Lock files are automatically removed when the process creating them exits.
- NetBSD 4.0 support.
- Italian and Catalan translations contributed for many modules, thanks to Giovanni and Jaume Badiella.
- Changed the error message that appears when Webmin detects a link from another web page, and removed the button to allow the link (which was unreliable anyway).
- Hid the Jabber and Security Sentries modules by default, as the underlying software is no longer supported.
- On Linux systems, sped up the function for finding processes so that it no longer has to launch 'ps' - instead, it reads /proc directly.
- When
read_file_lines
is used to read a file, the Unix or Windows newlines will be preserved when it is written out.
- Added Redhat Enterprise release 5 support.
- Requests to the /unauthenticated URL can never execute CGI programs, to provide an extra layer of security against URL escaping attacks.
- Fixed XSS bugs in
pam_login.cgi
.
- Added more
ui-lib.pl
functions for hidden page sections. - Fixed another XSS bug in chooser.cgi.
- The Webmin function to get the system's hostname now reads a file instead of calling the hostname comment, which is faster.
- Added an ACL option to the file chooser for additional directories to allow access to.
- Changed the way sizes are displayed, to use a format like 1.32 GB or 8 kB.
- Removed letter images (used by the old theme), and forced the standard header function to always use text titles.
- Added support for Slam64 Linux.
- Fixed XSS bugs in chooser.cgi.
- If the operating system is upgraded after Webmin is installed, a button is displayed on the main page to update Webmin's view of the current OS.
- Improved the tabs API to add an option to put a box around the visible tab, and whitespace around tabs.
- If listening on all specified IP addresses fails, Webmin will fall back to accepting connections on any address.
- All Module Config pages are now generating using new
ui-lib.pl
code, for easier theming. - Added a global access control option to set the Unix user the file browser lists directories as.
- Module configuration files can now be named based on the real operating system types, such as config-Ubuntu-Linux, which would be used in preference to config-debian-linux.
- When a large file is uploaded, it is no longer read into memory by
miniserv.pl
. - Update the code that fetches mirror sites from Sourceforge, to handle their new website design.
- Changed the default theme for all installs to the new framed blue theme.
- Updated all rows of links (like select all, invert selection, add something) above tables to use a separator between links.
- Added caching for sudo capable user checks, to avoid excessive slow calls to sudo.
- Fixed a memory leak when running under ActiveState Perl on Windows.
- Fixed the rare bug about renaming the .webmintmp file.
- SELinux security contexts are preserved on files safely modified by Webmin's write-and-rename code.
- Added xmlrpc.cgi program, which provides an XML-RPC interface to all Webmin module functions.
- Tested and improved support for Fedora 5.
- Fixed security holes that allow remote read access to any file on the server for which the path is known.
- Updated almost all modules that use tables to use the new
ui_columns
functions. This allows themes to do highlighting when a row is moved over or selected. - Added a new 'Simple Blue' theme, which uses fewer images and does table row highlighting.
- Changed the way that Webmin log diff files are stored, so that they are categorized by action and not all in one huge directory.
- Proxy settings made in the Webmin Configuration module are passed on to programs Webmin calls via the
http_proxy
andftp_proxy
environment variables. - Added automatically created UTF-8 translations for simplified and traditional Chinese.
- Fixed a possible security hole caused by a bug in Perl.
- Replaced all calls to the crypt() function with new code that will use the Crypt::UnixCrypt Perl modules on systems for with crypt() is broken.
- Added basic support for running Webmin on Windows system with ActiveState Perl installed. The new
setup.pl
install script must be used, as the setup.sh shell script cannot run on Windows. - Fixed a bug that could allow a remote attack if the option to use full PAM conversations is enabled.
- Improved the Webmin RPM to not lose the /etc/webmin directory when upgrading from an RPM by another vendor (like Mandrake or DAG).
- Added a new Global ACL control option to limit a user to read-only mode. This does not yet support all modules, but in those that are supported any changes the user makes will simply not take effect.
- Restarting of Webmin is now much faster in some modules that do not need a full configuration reload, due to the addition of a function that justs tells
miniserv.pl
to re-read its config file.
- On Solaris systems that support RBAC, available modules and access rights can now be derived from RBAC for selected users. This can be enabled on a per-user or per-module basic in the Webmin Users module.
- All subheadings have been reduced in size when using the default MSC theme.
- All modules now use a new API for writing to configuration files, which ensures that the file does not get written to or truncated if the system is out of disk space.
- When installing a module from the command line, by it will be granted to the same users who receive new modules when Webmin is upgraded. By default, this is root and admin.
- Added basic support for multiple root directories, so that Webmin modules can be separated into core and third-party on the filesystem.
- When installing or upgrading Webmin, password timeouts are now enabled by default. This protects against brute-force password guessing attacks.
- Added support for Solaris 10.
- Included several additional translations for various languages and modules.
- Added support for config- files that allow a range of OS version numbers, and used this to reduce the number of standard config files.
- Updated the setup.sh script to use MD5 password encryption by default, on systems where Perl supports it.
- Fixed a security hole in the
maketemp.pl
script, used to create the /tmp/.webmin directory at install time. If an un-trusted user creates this directory before Webmin is installed, he could create in it a symbolic link pointing to a critical file on the system, which would be overwritten when Webmin writes to the link filename (CVE bug CAN-2004-0559). - When PAM is used for Unix authentication, expired passwords are now detected and the user is prompted to select a new password (if this feature is enabled on the Webmin Configuration module).
- Make all functions in
ui-lib.pl
themable, allowing themes to have more detailed control over modules that make use of this library. - Updated all modules to call
ui_print_header
instead of calling header and printing<hr>
, so that themes can avoid the<hr>
. Also updated the MSC theme to do this.
- Fixed a security hole that allowed any user to view the configuration of any module, even those that they should not have access to.
- Fixed a security hole that could allow an attacker to lock valid users by sending a bogus username or password.