Improvements
- Primary patches against the php2shell PHP vulnerability
Changelog
cPGuard software release notes / changelog
Explore our latest feature releases, performance improvements, and critical security patches.
New Features
- LFD now has the option to block IPs with fake AI user agents strings
- LFD now supports per rule action
Improvements
- Added Geo DNS routing for WAF rule loading
- Cron job monitoring update
- Process monitoring update
- Updated the captcha vhost and ssl permissions
- Firewall UI improvements and message amendments
Bug Fixes
- Webuzo wordpress toolset bug fix
- Fixed the user plugin settings issue for scanner actions
Improvements
- Improved the user count logic for license validation
Bug Fixes
- Fixed the domain level WAF rule ID whitelist issue for rules running in phase 1
- Fixed bug in the firewall with outbound whitelist for specific IP and port
- Fixed the internal IP block issue for Enhance cluster
- Fixed bug in running Lynis job on some systems
Improvements
- License check update to include the new packages
- Added rule ID based filtering option for bot attacks logs
- Enhance firewall captcha vhosts build updates
Bug Fixes
- General agent and app portal bug fixes
Improvements
-
Fixed a security bug in the PHP-FPM internal package
The issue allows a compromiser to exploit the internal PHP socket to run as the cpguard user.
Improvements
Bug Fixes
- Minor bug fixes in the agent and the app portal
New Features
Improvements
-
Switched to new IPDB block list which is created by the refined system
It eliminates many false positives and blocks attacks from some IPs which was skipping in the older version
- Completely dropped Fail2ban and the log processing is now handled using LFD only
- Added new system to stop creating duplicate agent process
- Added option to disable WAF health check
- Updated wp-cli tool to the latest version
- Added UI option to manage DDNS entry in the firewall
Bug Fixes
- Fixed client UI virus detail displaying bug for certain files
- General agent and app portal bug fixes
Bug Fixes
- Fixed a bug in the user plugin where the user can restore file to a symbolic link
Improvements
- Slight adjustments in the temporary IP block/allow and set the default time to 24 hrs
Bug Fixes
- App portal bug fixes with WAF settings
New Features
- Captcha based IP unblock option is now available for IPs blocked in IPDB
- Added firewall Captcha support for Plesk
- Added IP/Country ignore option in mass operations section
- Added Telegram notification option
Improvements
- IP whitelist for file input option now works with/without comment
- Added firewall reports to daily email reports
- Lynis version has been updated to 3.1.8
- SMTP notification enhancements in connection testing
Bug Fixes
- General bug fixes in app portal and agent