1. cPanel & WHM Documentation
  2. Change Logs
  3. cPanel & WHM Change Log
  4. 130 Change Log

130 Change Log

Last modified: 2025 July 16

130.0.3

2025-07-16

  • Fixed CPANEL-47617: Update Cpanel::Leika user override to be an ini file.

  • Fixed CPANEL-48060: Update PHP to 8.4.10.

    • Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735)
    • Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix). (CVE-2025-6491)
    • Fixed GHSA-3cr5-j632-f35r (Null byte termination in hostnames). (CVE-2025-1220)

  • Fixed CPANEL-48140: Adjust RELEASE rollout logic to use a 5 day release cycle.

130.0.2

2025-07-14
  • Fixed CPANEL-48149: Bump rpm.versions for update to cpanel-git-2.48.2. Fixes CVE-2025-27613, CVE-2025-27614, CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385, and CVE-2025-48386.
  • Implemented CPANEL-48175: Restrict UI from creating temporary domain based on temporary-domain feature flag.

130.0.1

2025-07-02
  • Fixed CPANEL-44093: By displaying the current trend icon in the Load Averages component in the WHM header, users gain better clarity on system resource load status at a glance.
  • Fixed CPANEL-46029: Exclude kernel-devel* from rpmup.
  • Fixed CPANEL-46112: Added more user checks for DMARC record addition.
  • Fixed CPANEL-46608: Fix uninitialized variable warnings in bandwidth DB restoration.
  • Fixed CPANEL-46667: Integrated Change Password section with backend API, Implemented MixPanel tracking on form submit action.
  • Fixed CPANEL-46668: Integrated Contact Preferences section with backend API, Implemented MixPanel tracking on form submit action.
  • Fixed CPANEL-46705: Fixed issue with the 'All' filter in the DNS Zone Manager.
  • Fixed CPANEL-46895: Grant MySQL database privileges for cPanel users who have the SUPER privilege.
  • Fixed CPANEL-46985: WHM users can now choose between a temporary domain or an existing domain when creating an account.
  • Fixed CPANEL-46986: Temporary domains are now supported in the Modify an Account interface from WHM.
  • Fixed CPANEL-47054: Added 'is_temporary_domain' boolean to listaccts API.
  • Fixed CPANEL-47057: Remove temporary domain on account domain modification.
  • Fixed CPANEL-47059: Block email for temporary domains.
  • Fixed CPANEL-47060: Exclude temporary domains from DomainInfo API unless requested.
  • Fixed CPANEL-47062: UAPI Domain::is_temporary_domain + API2 domain updates.
  • Fixed CPANEL-47091: Hide temporary domains from UAPI Email::list_mail_domains.
  • Fixed CPANEL-47113: Block transfers of temp domains to servers that do not support it.
  • Fixed CPANEL-47156: Prevent temporary domains from showing in cPanel Zone Editor.
  • Fixed CPANEL-47266,CPANEL-47080,CPANEL-47086,CPANEL-47564: Multiple Mailman fixes (Mailman 2.2.0.31).
  • Fixed CPANEL-47319: Ability to convert a temporary domain to a normal one.
  • Fixed CPANEL-47321: Prevent Dynamic DNS page from showing temporary domains.
  • Fixed CPANEL-47411: Fix template issue where certain webmail pages would not load.
  • Fixed CPANEL-47428: The Create Email button is now disabled for temporary domains listed on the Domains page.
  • Fixed CPANEL-47429: On the Domains page, users with temporary domains will now see a banner informing that Email Accounts cannot be created for temporary domains.
  • Fixed CPANEL-47507: Prevent creating Dynamic DNS on temporary domains via UAPI.
  • Fixed CPANEL-47512: Update createacct openapi to reflect changes related to temporary domains.
  • Fixed CPANEL-47523: Disabled the email-enable toggle whenever a temporary domain is chosen in Manage Users Add/Edit User form and introduced an inline banner clarifying why email can’t be enabled.
  • Fixed CPANEL-47527: Fix emails being sent from temp domains.
  • Fixed CPANEL-47562: Prevent DNS edits for temporary domains.
  • Fixed CPANEL-47569: The domain selection dropdown in Dynamic DNS configuration now excludes temporary domains. Users with only temporary domains will see an informational banner explaining that Dynamic DNS requires registered domains and advising them to contact their hosting provider.
  • Fixed CPANEL-47586: Users now see in-page banner informing that Zone Editor cannot be used with the temporary domains.
  • Fixed CPANEL-47587: Update Roundcube to 1.6.11 to fix CVE-2025-49113.
  • Fixed CPANEL-47590: Allow addon domain creation with a temporary primary domain.
  • Fixed CPANEL-47662: WHM users will see the in-page banner informing about restricted usage of the DNS Zone Manager feature when user's account does not have registered domains assigned.
  • Fixed CPANEL-47678: Update cPanel PHP to 8.4.7.
  • Fixed CPANEL-47737: Users now don't see the Share document root checkbox after navigating to the Create a New Domain page while having temporary domain assigned as a main/primary domain. The Document Root input is displayed by default in this case. Updated tooltips placement to be consistent with other form controls.
  • Fixed CPANEL-47764: Unship cpanel-php-composer package.
  • Fixed CPANEL-47792: Fix bugs with temp addon domain to real addon domain conversion.
  • Fixed CPANEL-47815: Depend on distro PostgreSQL for DBD::Pg.
  • Fixed DUCK-2612: Adjust the whm top webcomponent to retain existing extensibility model and make the trend arrows work togather.
  • Fixed HB-7575: Clean up additional email user data when terminating mail account.
  • Fixed HB-7912: Prevent event update notifications/invites from non-organizers.
  • Fixed HB-8226: Fix path display names in certain DAV queries.
  • Fixed RE-1477: Bump rpm.versions for cpanel-perl-536.
  • Fixed WPX-5775: Improve HTTP DCV for new domains by removing the 'mail' alias and adding 'wp' and 'wp2' aliases.
  • Fixed WPX-6055: Implement a ProductConfig mechanism for global product-level config.
  • Fixed WPX-6754: Add ProductConfig option to not warn about missing theme in restores.
  • Fixed WPX-7770: Do not show the 'HTML Editor Removal Notice' on WP2 servers.
  • Fixed ZC-12783: Prevent cpdavd deadlocks by isolating SSL_CTX in child processes.
  • Implemented CPANEL-35466: Enhanced the PowerDNS error message to provide additional context from data.warnings.PowerDNS and included a link to the relevant documentation for improved clarity and user guidance.
  • Implemented CPANEL-46175: Add option in transfer tool and restorepkg to not restore DNS records for an account.
  • Implemented CPANEL-46605: Docs improvement to get/set_notification_preferences.
  • Implemented CPANEL-47130: Restrict creation of email accounts for temporary domains.
  • Implemented CPANEL-47131: Update several cPanel interfaces to account for restricted functionality of temporary domains.
  • Implemented CPANEL-47284: Ensure temporary domains are removed upon account termination.
  • Implemented CPANEL-47645: Provide better UX for temp domain users being blocked from webmail.
  • Implemented CPANEL-47693: Add HTML Editor removal notice to WHM Notification center.
  • Implemented HB-7304: Update Calendars and Contacts UI elements to be more uniform.
  • Implemented HB-8229: Add get/set_notification_preferences to UAPI.
  • Implemented HB-8230: Add UAPI call to change a cPanel user's system password.
  • Implemented MOON-2780: Add option to change the accounts password from the Account Preferences interface in cPanel.
  • Implemented MOON-2787: Add option to update contact emails to Account Preferences in cPanel.
  • Implemented MOON-2796: Add ability to update notification preferences to the Account Preferences page in cPanel.
  • Implemented MOON-2974: The Consent and Gathering step of the cPanel welcome modal may be temporarily dismissed.
  • Implemented RE-1398: Add UAPI calls for saving and retrieving the Pushbullet access token associated with user notifications.
  • Implemented RE-1421: New tweak setting to specify the file size used by the securetmp script for /tmp and /var/tmp.
  • Implemented WPX-7607: Update cpanel-geoipfree-data to version 128.2-1.cp128.

Additional Documentation