What’s New

• Fixed: Addressed a critical bug that caused unexpected data removal during the cloning process.

Deployment Information
This update will automatically roll out to all compatible servers within 72 hours.

• No action is required.
• The update installs seamlessly in the background.

What’s New

• Fixes: Fixed a service execution bug causing OpenLiteSpeed to fail under certain conditions.
• Fixes: Resolved specific environment configuration conflicts affecting WordPress Canvas deployments.
• Improvement: Optimized the teardown logic for web application and database deletion routines.
• Improvement: Expanded log output and improved status event tracking for the web application cloning process.
• New: Added support for defining and applying custom Nginx configuration templates.

Deployment Information
This update will automatically roll out to all compatible servers within 72 hours.

• No action is required.
• The update installs seamlessly in the background.

What’s New

• Fixed: WordPress download checksum to prevent file truncation.
• Added: Support for LiteSpeed Enterprise.

Deployment Information
This update will automatically roll out to all compatible servers within 72 hours.

• No action is required.
• The update installs seamlessly in the background.

What’s New

• Fix: Resolved an issue with ModSecurity configs failing to clone correctly.
• Improvement: Added a recovery notification for the autohealing process.

Deployment Information
This update will automatically roll out to all compatible servers within 72 hours.

• No action is required.
• The update installs seamlessly in the background.

What’s New

• Fixed: Firewall-related errors when modifying rules. 
• Improvement: Agent health reporting to eliminate false error alerts during server restarts. 

Deployment Information

This update will automatically roll out to all compatible servers within 72 hours.

• No action is required.
• The update installs seamlessly in the background.

What’s New

• Fix: Auto-healing is logging uninstalled PHP services, causing logs to consume excessive storage.
• Fix: Symlink sorting issue in the file manager.

Deployment Information

This update will automatically roll out to all compatible servers within 72 hours.

• No action is required.
• The update installs seamlessly in the background.

RunCloud Agent v2.17.5 (Patch)

What’s New

• Fix: Resolved an issue where symlinks could not be opened with the file manager.

Deployment Information

This update will automatically roll out to all compatible servers within 72 hours.

• No action is required.
• The update installs seamlessly in the background.

RunCloud Agent v2.17.1 (Patch)

What’s New

• Fix: Resolved an auto-healing issue that caused a "database is locked" error.
• Fix: Addressed a File Manager error that occurred in certain edge cases.

Deployment Information

• This update will roll out automatically to all compatible servers within 72 hours.
• No action is required. The update installs seamlessly in the background.
• If your server does not receive the update within this timeframe, please get in touch with our support team for manual assistance.

This release includes a comprehensive set of upstream security patches addressing multiple vulnerabilities across core NGINX modules, improving overall stability and hardening key request-handling paths. 

• Fixed WebDAV module buffer overflow
  Resolved a vulnerability in ngx_http_dav_module where specially crafted requests could cause memory corruption, potentially leading to crashes or arbitrary code execution.
• Fixed MP4 streaming module buffer overflows
  Fixed multiple vulnerabilities in ngx_http_mp4_module where malformed MP4 files or requests could trigger memory corruption and destabilize the server.
• Fixed NULL pointer dereference in authentication methods
  Corrected a flaw in CRAM-MD5 and APOP authentication that could cause NGINX to crash when handling invalid authentication data.
• Fixed injection vulnerability in mail proxy (auth_http and XCLIENT)
  Patched an issue that could allow injection of unintended commands or data during mail authentication or client identification.
• Fixed OCSP validation bypass in stream module
  Closed a gap where SSL certificate revocation checks (OCSP) could be bypassed under certain configurations, improving TLS validation.
• Fixed SSL upstream injection issue
  Resolved a vulnerability that could allow manipulation of data in SSL connections to upstream servers.

RunCloud Agent v2.16.8 (patch)

What’s New

• Fix: Fixed an issue in OLS staging caused by enabling the Redis cache.
• Fix: Resolves a cloning issue between containerized and native servers.

Deployment Information

This update will automatically roll out to all compatible servers within 72 hours.

• No action is required.
• The update installs seamlessly in the background.

If your server has not received the update after 72 hours, please contact our support team for manual assistance.