1. cPanel & WHM Documentation
  2. Change Logs
  3. cPanel & WHM Change Log
  4. 128 Change Log

128 Change Log

Last modified: 2025 June 2

128.0.9

2025-06-02
  • Fixed case CPANEL-47587: Update Roundcube to 1.6.11 to fix CVE-2025-49113.

128.0.7

2025-05-29
  • Fixed CPANEL-46537: Bump cpanel-mailman version to 2.2.0-22 for 128.
  • Fixed CPANEL-46595: Update cpanel-roundcubemail to 1.6.9.9-1.
  • Fixed CPANEL-46609: Update cpanel-mailman to 2.2.0.21-1.
  • Fixed CPANEL-46815: Update cpanel-roundcubemail to 1.6.10 in etc/rpm.versions.
  • Fixed CPANEL-46819: Update Exim to 4.9.2.
  • Fixed CPANEL-46823: Update re2c to 4.2.
  • Fixed CPANEL-46839: Bump rpm.versions to update cpanel-clamav to 1.0.8-1.cp118.
  • Fixed CPANEL-46842: Update cpanel-munin to 2.0.73.
  • Fixed CPANEL-46845: Update PowerDNS to 4.9.5.
  • Fixed CPANEL-46906: Provide module to work with Leika data.
  • Fixed CPANEL-46938: Bump cpanel-mailman version to 2.2.0-23.
  • Fixed CPANEL-47116: Bump rpm.versions for Perl::Critic and PPI updates.
  • Fixed CPANEL-47227: Bump rpm.versions for cpanel-php83 update.
  • Fixed CPANEL-47318: Bump rpm.versions for the latest version of Perl::Tidy.
  • Fixed CPANEL-47359: Add cpanel-perl-536-safe-isa to perl536-internal group.
  • Fixed CPANEL-47375: Fix lines with ',,' or '=> =>' in them.
  • Fixed ZC-12783: Prevent cpdavd deadlocks by isolating SSL_CTX in child processes.
  • Implemented CPANEL-46909: Teach CpKeyClt about leika data.

128.0.5

2025-04-24
  • Fixed CPANEL-46607: Fix multiple bugs in Mailman.
  • Fixed CPANEL-46872: The Consent and Gathering step of the cPanel welcome modal may be temporarily dismissed.
  • Fixed RE-1399: Changed addon domain conversion to set the new account to use the inherited PHP version when appropriate.
  • Fixed RE-1425: Update EOL blocker message in upcp to reference ELevate where relevant.
  • Fixed RE-1477: Bump rpm.versions for cpanel-perl-536.
  • Fixed RE-1487: Bump rpm.versions for cpanel-php83 8.3.20.

128.0.3

2025-04-13
  • Fixed RE-1477: Update rpm.versions for cpanel-perl-536: CVE-2024-56406: Heap-buffer-overflow with tr//

128.0.2

2025-04-08
  • Fixed CPANEL-46530: Update Mailman to 2.2.0.16-2: adds some limits to the one time backup that happens for mailman when upgrading to the python3 version.
  • Fixed RE-1159: Allow Security Advisor to begin recommending ELevate to users of AlmaLinux 8.

128.0.1

2025-03-27
  • Fixed HB-7224: Improve iTIP calendar invitations.
  • Fixed HB-7355: Improve calendar delegation validation.
  • Fixed HB-7468: Update cpanel-roundcubemail to 1.6.9.6-1.
  • Fixed HB-7555: Remove attendee symlinks when original event is deleted.
  • Fixed HB-7958: Add HASDMARC to list of restoreable CPUSER keys.
  • Fixed HB-8187: Fix Roundcube conversion to sqlite when email accounts have a large amount of calendar events.
  • Fixed HB-8219: Ignore 'nobody' user data for hostname if "Allow users to park subdomains of the server’s hostname" setting is enabled.
  • Fixed HB-8225: Verify ability to use Spamhaus when enabling setting.
  • Fixed HB-8228: Update Mailman to version 2.2.0-15 to fix module imports.
  • Fixed MOON-2529: Show NS Records in cPanel interface's Zone Editor > Manage View. cPanel users cannot create, edit, or delete these records.
  • Fixed MOON-2578: Modernize the Manage Account Suspension page.
  • Fixed MOON-2584: Remove an obsolete cPanel feature (Change Style) from WHM > Feature Manager.
  • Fixed MOON-2586: Display the information regarding user's analytics participation.
  • Fixed MOON-2603: Add tracking on the link clicks on the WHM tools page.
  • Fixed MOON-2604: Add analytics tracking for links in WHM’s main menu.
  • Fixed MOON-2605: Improve navigation for History Reports in cPHulk.
  • Fixed MOON-2606: Improved empty Mail Statistics Summary page in WHM.
  • Fixed MOON-2679: Fix home symbol to accurately reflect document root when creating a new domain in cPanel.
  • Fixed MOON-2682: Update descriptions of Zone Editor in WHM's Feature Manager.
  • Fixed MOON-2697: Fixed issue with path shown when changing domains document root in cPanel.
  • Fixed MOON-2698: Stop alerts from being obstructed in Calendar and Contacts Sharing.
  • Fixed MOON-2744: Add option to change the current accounts language from the Account Preferences interface in cPanel.
  • Fixed MOON-2820: Improve accessibility issues in cPanel.
  • Fixed MOON-2828: Add the new strings to fix the warnings.
  • Fixed MOON-2836: A "Reset Language" banner now appears on the Tools page after signing in, if your selected language doesn’t match Account settings.
  • Fixed MOON-2878: Fix styling in WHM favorite cards.
  • Fixed MOON-2879: Fix alignment issue on cPanel tools page.
  • Fixed RE-118: Add generic EOL banner in WHM.
  • Fixed RE-982: Skip slow rollout when the major version for the release and stable tier are the same.
  • Fixed RE-1171: Switch to using distro provided pigz for cPanel.
  • Fixed RE-1193: Remove the cpanel-pigz package.
  • Fixed RE-1213: Updated the following packages to ensure file consistency across platforms: cpanel-angular-chosen, cpanel-angular-growl-2, cpanel-angular-minicolors, cpanel-bootstrap, cpanel-bootstrap-devel, cpanel-fontawesome, cpanel-git-templates, cpanel-jquery-minicolors, cpanel-moment-devel, and cpanel-yui.
  • Fixed RE-1226: Do not add active root hint zones to the DNS server configuration.
  • Fixed RE-1227: Update BackBlaze B2 backup transport to use the v3 API.
  • Fixed RE-1274: Update cpanel-ioncube to 14.4.0 in rpm.versions.
  • Fixed RE-1358: Fix IPv6 Overlap check for shared IP in Whostmgr::TweakSettings::Basic.
  • Fixed RE-1393: Update cpanel-php83 to 8.3.19 in etc/rpm.versions.
  • Fixed RE-1401: Ensure cpsrvd's memory limits are properly set upon startup.
  • Fixed RE-1418: Update cpanel-exim to 4.98.1-2.cp118 in etc/rpm.versions to fix CVE-2025-30232.
  • Fixed RE-1419: Speed up autodomain configuration during post snapshot.
  • Fixed WPX-2881: Smarter tiers parsing from /etc/cpupdate.conf.
  • Fixed WPX-2938: Only enable CageFS if not already enabled.
  • Fixed WPX-3021: Improve bin/checkallsslcerts pre-DCV checks and error handling.
  • Fixed WPX-3103: Support for Bring Your Own License (aka BYOL) with WP2.
  • Fixed WPX-3714: snapshot_prep will now do some minimal RHN cleanup on CloudLinux.
  • Fixed WPX-5192: Update create and modify account templates to disable spellcheck.
  • Fixed WPX-5193: Update GeoIP DB to version 20241210.
  • Fixed WPX-5315: Add a new API call SSH.get_shell to get the user shell and check if the user can access terminal.
  • Fixed WPX-5339: Improve bin/manage_hooks cleanup when removing hooks from a package.
  • Fixed WPX-5344: Clicking username or domain selects or delects checkbox for terminating accounts.
  • Fixed WPX-5412: Ensure the 'default' package is properly applied during transfers.
  • Fixed WPX-5437: Improve WHM localization for more completeness.
  • Fixed WPX-5818: Add new UAPI call: 'DomainInfo::primary_domain'.
  • Fixed WPX-6083: Update GeoIP package to 20250307 version.
  • Fixed ZC-9351: Fix Optimize Website causing high CPU load.
  • Fixed ZC-12552: Remove generated hostnames from Change Hostname.
  • Fixed ZC-12594: Fix failure to upgrade to MariaDB 11.4.
  • Implemented HB-7170: Extend RRULE handling for freebusy requests.
  • Implemented WPX-1411: Enable CageFS & MySQL Governor.

Additional Documentation