Back to Changelog
Panel Backend

v1.0.544

Patch Released September 25, 2026

Fixes Plesk migration PHP version detection, protects real mailboxes from automatic role aliases, corrects the per-mailbox Webmail button, and enables reading of cPanel-migrated compressed mail.

Improvements

2
  • Closed a Docker mount-path symlink escape by routing validation through the shared path validator.
  • Internal audit and test-suite hardening: sentinel run-level checks, failed-run detection, and dead trigger cleanup.

Bug Fixes

4
  • Plesk migration: sites no longer all land on PHP 8.1. Discovery now reads each domain PHP handler from Plesk (e.g. plesk-php74-fpm) instead of the server-wide CLI version, with panel setting, .htaccess and system PHP fallbacks, and warnings when it cannot be detected.
  • The per-mailbox Webmail button now opens that specific mailbox instead of whichever Roundcube session happened to already be open.
  • Enabled Dovecot zlib support so mail migrated from cPanel (stored gzip-compressed) can be read again (SH-117).
  • Domain alias records are now written into the Apache vhost as well as nginx, and an existing broken template is repaired automatically (SH-116).

Security Fix

1
  • Automatic postmaster@/abuse@/hostmaster@ role aliases no longer steal mail from a real mailbox or bypass a configured catch-all address (SH-118). A startup self-heal repairs affected mail maps on existing installs automatically.
See the Demo