Bug Fixes
- Fixed the user panel access issue and improved permissions
Changelog
cPGuard software release notes / changelog
Explore our latest feature releases, performance improvements, and critical security patches.
Security patches and update channel changes
New Features
- ASN allow and deny option in firewall
- Option to control number of concurrent manual scan limit
Improvements
- Firewall changes to allow known proxies on web ports by default
- Rule line up changes to allow more control ovr whitelist and blacklist
- Update channel is now privately signed and run from an isolated infrastructure
- Patches for security issues found during internal audit
- Internal Nginx is updated to latest stable version
Improvements
-
Revoked support access to servers if it is enabled
please read the security advisory for details.
Improvements
-
Patched compromised update...
Please read the security advisory for details.
Improvements
- Updated internal PHP
Improvements
- Primary patches against the php2shell PHP vulnerability
New Features
- LFD now has the option to block IPs with fake AI user agents strings
- LFD now supports per rule action
Improvements
- Added Geo DNS routing for WAF rule loading
- Cron job monitoring update
- Process monitoring update
- Updated the captcha vhost and ssl permissions
- Firewall UI improvements and message amendments
Bug Fixes
- Webuzo wordpress toolset bug fix
- Fixed the user plugin settings issue for scanner actions
Improvements
- Improved the user count logic for license validation
Bug Fixes
- Fixed the domain level WAF rule ID whitelist issue for rules running in phase 1
- Fixed bug in the firewall with outbound whitelist for specific IP and port
- Fixed the internal IP block issue for Enhance cluster
- Fixed bug in running Lynis job on some systems
Improvements
- License check update to include the new packages
- Added rule ID based filtering option for bot attacks logs
- Enhance firewall captcha vhosts build updates
Bug Fixes
- General agent and app portal bug fixes
Improvements
-
Fixed a security bug in the PHP-FPM internal package
The issue allows a compromiser to exploit the internal PHP socket to run as the cpguard user.