We're excited to introduce a new security feature that automatically safeguards your Redis instances using Access Control Lists (ACLs). With this update, RunCloud ensures that your Redis deployments are securely configured by default, providing an additional layer of protection for your data.

This is particularly important if you host multiple web applications on a single server.

Newly-deployed servers and web applications are secured by default.

Note: The minimum agent version is 2.8.9+8.

Learn more & refer to this guide on how to secure existing web applications.

A big thank you goes out to the security researcher – Vladimir Smitka – who performed a series of tests and originally reported this proposed improvement to how Redis works by default on RunCloud.

Due to the individual/custom configurations of existing web apps – the setup process may vary slightly. If you run into any issues, please feel free to get in touch if you run into any issues.

Ubuntu 24.04 is now available for the OpenLiteSpeed server stack, so you can now choose it as your operating system image when you deploy new OpenLiteSpeed servers with RunCloud.

Servers running the OpenLiteSpeed server stack with Ubuntu 24.04 will run the following OLS, MariaDB, and Redis versions: 

• OpenLiteSpeed: 1.7.19
• MariaDB: 11.4
• Redis: 7.4

Note: We do not recommend directly updating servers that are running production workloads. The safest migration path is to deploy a new server and migrate web applications and databases over to the fresh installation of Ubuntu 24.04. We are unable to support migrations of live production workloads. 

You can now select the Asia Pacific (Malaysia) Region when using Amazon S3 as your External Storage backup destination. 

Learn more about how to automate backups to Amazon S3 here.

RunCloud Agent v2.8.8+8

• Fixed: Problem With Blocked IPs in Fail2Ban Not Working After Firewall Deployments.

System User

• Fixed: Unable to Assign Sudo Privileges to Certain System Users.

RunCloud Agent v2.8.8+7

• Fixed: Issue With PHP Configuration During the Deletion of Web Applications.
• Improved: Restoring Backups Leading to a Spike in CPU Usage.

RunCloud Agent v2.8.8+5

• Fixed: Problem encountered during backup restoration

PHP Updates (NGINX)

• PHP 8.3.10
• PHP 8.2.22

Note: If your server runs on OpenLiteSpeed, RunCloud does not handle PHP version updates. However, once a PHP version update becomes available for OpenLiteSpeed, it should also be automatically available on your server(s).

• Improved: The RunCloud Hub WordPress Plugin Can Now Be Updated Directly In Your RunCloud Dashboard.
• Improved: Introduced Warnings to Indicate Whether the RunCloud Hub WordPress Plugin is Removed, Not Installed, or Deactivated, With the Option to Resolve These Issues Directly in Your RunCloud Dashboard.
• Improved: Introduced Warnings to Indicate whether the RunCloud Hub NGINX Configuration is Missing, Invalid, or Incorrect, With the Option to Resolve These Issues Directly in Your RunCloud Dashboard.
• Improved: New Option to Enable Redis Object Cache When RunCloud Hub is Enabled for Your Web Application.
• Improved: The RunCloud Dashboard Now Displays the Redis Object Cache Status as Either Disabled, Enabled via RunCloud Hub, or Enabled via a Third-Party Redis Cache Plugin.
• Improved: Redis Object Cache Can Be Easily Enabled or Disabled in Your RunCloud Dashboard Without Needing to Log in to Your WordPress Admin Dashboard.

Note: This improvement requires RunCloud Agent v2.8.3 or higher in your server.

• Improved: Improve stability of the storage monitoring process

Note: This update will automatically apply to your server within 72 hours. If you do not receive the update within this timeframe, please contact our support team, and they will help you manually update your server(s).

• Improved: Introduced Unique Cache Keys for WooCommerce Sessions to Prevent "Cart-Conflict" Between Site Visitors.
• Improved: Pages With a Set-Cookie Header Are No Longer Cached to Prevent "Session-Conflict" Issues Due to FastCGI/Proxy Cache.
• Improved: Pages With a No-Cache Cache-Control Header Are No Longer Cached, Enhancing Support for More WordPress Plugins.
• Improved: Purge Cache URLs Now Support Query Strings, Enhancing the "Include Cache Query String" Feature.
• Improved: NGINX Cache Key Update for Easier Purging of Pagination URL Variations and URLs With Query Strings When the Current Page Cache is Cleared.

• Improved: Enhanced Purge Cache by URL Functionality to Target Exact Page URL Without Using Wildcards.
• Improved: The WP-CLI runcloud-hub purgeall Command Now Also Clears Cloudflare Cache When the Integration is Enabled.
• Fixed: Warning in WP-CLI When Running Scheduled Purge Cache With Cloudflare Integration Enabled.

Note: If you still have an older version of the plugin installed and do not see an update notification in the WordPress dashboard, you can manually update it using the plugin ZIP file. 

PHP Updates (NGINX)

• PHP 8.3.9
• PHP 8.2.21

Note: If your server runs on OpenLiteSpeed, RunCloud does not handle PHP version updates. However, once a PHP version update becomes available for OpenLiteSpeed, it should also be automatically available on your server(s).

Nginx Updates

• nginx-rc 1.25.3.2

Apache Updates

• apache-rc 2.4.62