Changelog

Add new Virtualmin Podman plugin for Virtualmin Pro users, bringing per-domain container and pod management to both the UI and CLI, along with a large catalog of easy-to-deploy application recipes Add Btrfs subvolume and hierarchical qgroup quota support for virtual servers and mailbox users Add ability for domain owners to use permitted Virtualmin remote API commands, with auditing and domain-scoped access checks Add Auktiva, Fish Auctions and Pixelfed web app installers for Virtualmin Pro users Add Django web app installer with isolated Python environments, Gunicorn services managed by systemd, production-safe settings and automatic database driver setup Add support for Ubuntu 26.04 Add HTTP/3 support for Nginx websites, including per-domain and server-template controls on supported systems Add full lifecycle support for IPv6-only virtual servers, including creation, modification, cloning, backup, restore, DNS, web, mail and SSL handling Add ability to add or remove an IPv4 address from an existing virtual server Add support for requesting ACME SSL certificates containing IP address identifiers Add support for FTPS backup destinations Add automatic inclusion of MySQL/MariaDB binary log coordinates in database backups for point-in-time recovery when binary logging is enabled on the server Add point-in-time recovery on restore, optionally replaying MySQL/MariaDB binary log transactions from the coordinates recorded in the backup up to a given time Add support for chaining differential backups to a selected full backup, with safer state tracking, log filtering and deletion checks Add alias domain redirect configuration and improve website redirects for sub-paths, filenames and query strings Add resource limits configuration to virtual server templates Add support for domain owners to manage their own systemd user units Add milter-greylist support for greylisting on RHEL 10 and derivatives Add ability to configure the TLS security level for Postfix services managed by Virtualmin Add a dedicated mail options section and group other related module configuration settings into appropriate sections Add TLSA records for Postfix SMTPS services Add support for primary DNS zones and CLI flags to exclude named DNS records Add transactional Cloudflare DNS record updates using the batch API to prevent partial migrations #1267 Add ability to show disk usage on the virtual server summary page Add support for using any DynDNS-compatible dynamic DNS service, like No-IP or Dynu, by making the update server configurable Fix cross-stack restores to preserve target system features, disable unavailable domain features and handle PHP modes correctly Fix unsupported CGI modes in standard templates after cross-stack restores Fix mail client autoconfiguration to enable a supported CGI mode when needed Fix to restore preflight checks and error reporting to catch clashes earlier and show SSL failures Fix post-installation wizard setup for PostgreSQL, SpamAssassin and ClamAV Fix configuration write races in long-running operations that could cause recent Virtualmin settings to be lost Fix to enforce mailbox and domain disk quota on mail delivery even when spam filtering is disabled, so full mailboxes no longer lock out webmail and IMAP access Fix domain registration expiry checks taking too long when a WHOIS server does not respond Fix PHP-FPM version repair running during package updates Fix ZIP restores to validate untrusted archives and extract them as the virtual server owner Fix chroot jail cleanup to safely unmount nested bind mounts before removing files Fix to prevent virtual server owners from downloading files from non-public URLs Fix SSL certificate parsing, CA chain handling, service syncing and repeated ACME request retries Fix several Dovecot SNI and per-IP certificate issues, including nested and alias domains Fix Postfix per-IP certificate updates and TLSA refresh after ACME renewal Fix several DNS record and zone issues, including apex shorthand, parent record locking, DS handling, sub-server zones and proxied cloud DNS checks Fix to prevent deleting credentials used by an active cloud DNS provider Fix MariaDB/MySQL user recreation to preserve authentication plugins and restore extra database users correctly Fix several website SSL, alias and HTTPS proxy redirect regressions Fix SFTP purging of backups stored in date-based directories Fix phpMyAdmin and Usermin automatic login issues Fix web app installers to avoid URL paths owned by plugins Fix Webmin API credential handling and hide passwords from FTP command errors Fix Apache proxy backends to receive the original HTTP or HTTPS scheme through X-Forwarded-Proto Fix config check to advise disabling the default IPv6 address when no externally visible IPv6 address can be detected Fix dynamic IP updates to use SSL when connecting to DynDNS Drop the obsolete per-domain ProFTPD virtual FTP feature while preserving service controls and backup compatibility Rename the Git-based config history CLI commands to list-config-revisions and restore-config-revision Replace the legacy website preview flow with sandboxed proxying Change to move domain-owner Webmin module access from “Server Templates” to “Manage Virtual Server ⇾ Edit Owner Limits”, preserving existing access on upgrade and applying template defaults only to new servers; module access can also be updated for multiple servers from “List Virtual Servers” in Pro, or through modify-limits CLI in all editions #1039

Add support for creating vfsv1 Linux quota files for limits above 4 TiB, while preserving existing quota file formats Add Btrfs subvolume quota management to the Disk Quotas module, with full and simple accounting modes Add support for openSUSE 16 vendor and local Logrotate configuration overlays #2682 Add support for applying multiple patches at once with the patch sub-command Add APT package hold management to the Package Updates module Add incremental ban time options to the Fail2Ban module Fix Webmin server connections that open but never send a request, preventing them from waiting indefinitely #2815 Fix to ignore failures when adding IPv6 link-local (fe80::) addresses that may already be configured automatically Fixed creation of permissions new log files in the System Logs module (thanks to Kevin Carter) Fix Fail2Ban jail editor to correctly separate actions when one has no parameters #2718 Fix to honor the editable users ACL in the group member chooser in Users and Groups module #2464 Update the Authentic theme to the latest version with various improvements: Fix change detection and submission for forms using grouped bottom action buttons Fix login page front side clipping and flip animation for long welcome messages Fix opening the wrong directory in Terminal for domain owners in File Manager Fix disallowed entry handling in File Manager forum.virtualmin.com/t/137654 Fix inline images not displaying when printing emails in Usermin Fix various styling issues for ConfigServer Security & Firewall Fix navigation detection for the new Virtualmin Podman plugin Fix bottom page action buttons wrapping and alignment Fix errors for Webmin-only users in File Manager Assets File Size File Size Webmin Usermin webmin-2.660-1.noarch.rpm 32.5 MB usermin-2.560-1.noarch.rpm 13.8 MB webmin_2.660_all.deb 26.7 MB usermin-2.560_all.deb 9.4 MB webmin-2.660.pkg.gz 36.3 MB usermin-2.560.tar.gz 15.4 MB webmin-2.660.tar.gz 37.1 MB webmin-2.660-minimal.tar.gz 3.7 MB

Fix to include missing xmlrpc-lib.pl file in the package Fix listing partially installed Debian and derivative packages Update the Authentic theme to the latest version with various improvements: Add improved support for the upcoming Virtualmin Podman plugin Fix mail compose panel styling and sizing on initial load in Usermin Assets File Size File Size Webmin Usermin webmin-2.653-1.noarch.rpm 32.5 MB usermin-2.552-1.noarch.rpm 13.8 MB webmin_2.653_all.deb 26.7 MB usermin-2.552_all.deb 9.4 MB webmin-2.653.pkg.gz 36.3 MB usermin-2.552.tar.gz 15.4 MB webmin-2.653.tar.gz 37.1 MB webmin-2.653-minimal.tar.gz 3.7 MB

Add a global per-user ACL control to block URL downloads from non-public IP addresses in File Manager, Mailboxes, and Upload and Download modules Fix to recognize hex numeric HTML entities to work in various elements Fix patch sub-command to reload Webmin instead of restarting, making it possible to run from Terminal module Fix SSL certificate and TCP monitors to report transient connection failures as down, and SSL check timeouts as timed out, rather than uninstalled Fix local file imports to enforce file access ACLs in Users and Groups, LDAP Users, MySQL/MariaDB, and PostgreSQL modules Fix Webmin user switching and session checks to find sessions stored with HMAC session keys Fix Usermin user switching to use one-time login URLs instead of the legacy cookie handoff and service restart flow Fix APT package architecture suffix handling to avoid false package update failure reports Fix missing Maildir folders to be counted as empty in Mailboxes module Fix Postfix version comparisons to handle version strings safely Fix SELinux labeling for Webmin and Usermin runtime data Update the Authentic theme to the latest version with various improvements: Fix inconsistent gaps around rounded UI elements Fix CPU usage values exceeding 100% in the dashboard Fix File Manager remote downloads to respect download address restrictions Fix spacing in the login page welcome message Assets File Size File Size Webmin Usermin webmin-2.652-1.noarch.rpm 32.5 MB usermin-2.551-1.noarch.rpm 13.8 MB webmin_2.652_all.deb 26.7 MB usermin-2.551_all.deb 9.4 MB webmin-2.652.pkg.gz 36.3 MB usermin-2.551.tar.gz 15.4 MB webmin-2.652.tar.gz 37.1 MB webmin-2.652-minimal.tar.gz 3.7 MB

Fix Certbot-backed certificate requests and renewals to correctly parse PEM paths after issuance Fix live activation of Linux bond interfaces #2777 Update the Authentic theme to the latest version with various improvements and fixes: Fix search-result all-items delete in File Manager Fix search-result delete ordering in File Manager Fix to speed up search-result deletion cleanup in File Manager Assets File Size Webmin webmin-2.651-1.noarch.rpm 32.5 MB webmin_2.651_all.deb 26.7 MB webmin-2.651.pkg.gz 36.3 MB webmin-2.651.tar.gz 37.1 MB webmin-2.651-minimal.tar.gz 3.7 MB

Add new Systemd Services and Units module Add new GRUB 2 Boot Loader module Add new Kea DHCP Server module Add WebSocket proxy support to the Webmin Servers Index module Add basic Alpine Linux support Add IP-based Let’s Encrypt certificate support with Certbot 5.3 Add editable SSH public keys for newly added Unix users in Users and Groups module Add improvements to custom Webmin temporary directory handling Add quick service and port forwarding controls to the nftables module Add optional pre- and post-scripts for scheduled package updates Add option to control when scheduled package update email is sent Add per-user RPC/API-only access option to the Webmin Users module Add Apache 2.4 MPM process limit directives #1821 Add dhcpcd network backend for Debian and Raspberry Pi OS #1607 Add hardware RAID passthrough devices config in the SMART Status module #1704 Update Xterm.js to fix Control-C handling on iPadOS/Safari terminals Update Webmin systemd service unit to run without forking Fix IPv6 CIDR access control matching #1570 Fix Bootup and Shutdown module to show only services and not all units on systemd systems Fix Let’s Encrypt renewal scheduling to count from the last successful request Fix NetworkManager detection on Debian and IPv6 DNS nameserver saving Fix Dovecot configuration file handling when saving extra configs Fix mailbox listing to skip unusable Maildir entries and remove stale deleted or moved entries Fix Postfix module labels to identify virtual alias maps instead of virtual mailbox domains #1541 Fix Apache module to hide disabled default virtual hosts from the active server list Fix Netplan DNS saving to preserve YAML structure Fix BIND DNS handling of underscores, trailing dots, and mass record length checks Fix MariaDB user creation when using auth plugin syntax Fix PHP-FPM monitor on EL systems when using /etc/php.ini as the config file Fix RPC-only accounts to block browser/module access before module ACL checks Fix reflected XSS in Webmin status messages Fix authentication state handling for SSL certificate logins and proxied keep-alive requests Fix path validation in File Manager, package delete helpers, and Apache virtual host files Update the Authentic theme to the latest version with various improvements and fixes: Add zooming to stats history graphs by holding shift and scrolling in the dashboard Add support for saving live stats history for up to 24 hours without performance impact Add better support for the new Nginx, nftables, and upcoming systemd, Kea-DHCP, and GRUB 2 Webmin modules Add ability to always show available dashboard panels in theme configuration Add support for live stats and terminal WebSocket connections through Webmin Servers Index proxy links Fix proxying when Webmin is accessed with a webprefix using Webmin Servers Index module Fix theme UI helpers to escape generated markup more safely Fix iOS terminal viewport sizing Fix editor save handling, clean-state indication and dirty reload guard Fix popover positioning, z-index and border color for help bubbles Fix the active product switch border in the navigation menu for the dark palette Fix to validate password reset return URLs Assets File Size File Size Webmin Usermin webmin-2.650-1.noarch.rpm 32.5 MB usermin-2.550-1.noarch.rpm 13.8 MB webmin_2.650_all.deb 26.7 MB usermin-2.550_all.deb 9.4 MB webmin-2.650.pkg.gz 36.3 MB usermin-2.550.tar.gz 15.4 MB webmin-2.650.tar.gz 37.1 MB webmin-2.650-minimal.tar.gz 3.7 MB

Add support for trusted proxy IP addresses Fix bugs when editing monitors in the System and Server Status module Fix skip hwclock when unavailable #2693 Update Authentic theme to the latest version with bug fixes: Fix issue where the log type cannot be selected in the System Logs module Assets File Size webmin-2.641-1.noarch.rpm 32.2 MB webmin_2.641_all.deb 26.4 MB webmin-2.641.pkg.gz 36.1 MB webmin-2.641.tar.gz 36.7 MB webmin-2.641-minimal.tar.gz 3.7 MB

Add new nftables module with profiles, saved tables, and chains/sets management Add new Nginx module with look and feel matching the Apache module Add option to hide sensitive values (like passwords or tokens) from Webmin’s request logs Add custom ACME server support for Webmin SSL renewal Add support for the latest MariaDB on Ubuntu 26.04 Add multi-statement SQL query support when executing inline in MySQL/MariaDB module Add support for ext4 hidden inode quota mode Add used space and usage percentage reporting for ZFS in the dashboard Add mass enable and disable buttons for status monitors in the System and Server Status module Update tiny ACME client to the latest version Update DHCP default config for openSUSE 16 #2678 Fix to prevent bypassing two-factor authentication in RPC requests Fix session cookies to use safer defaults Fix handling of connections coming through a reverse proxy Fix unsafe mailbox attachment handling in Mailbox module Fix unsafe decoding of Outlook winmail.dat attachments Fix Certbot standalone port conflicts Fix to correctly preserve full quoted action parameters in the Fail2Ban jail editor #2647 Fix Fail2Ban default jail options to preserve required timing defaults when saving Fix ZFS to fall back to df when disk space cannot be computed from zpool Fix to allow toggling process priority and I/O controls on or off Fix issue where disabled email notifications were still being processed Update Authentic theme to the latest version with various improvements and fixes: Upgrade stats history graphs from laggy SVG to a blazing-fast canvas renderer Add option to control corner roundness for the menu, content area and right-side slider Change the content area to use rounded corners and a margin by default Fix message of the day display in login page correctly webmin#2555 Fix tooltip visibility in dark palette Fix session login button spinner Fix various button styling issues (active state, tiny buttons, airy buttons, stack position) Assets File Size File Size Webmin Usermin webmin-2.640-1.noarch.rpm 32.2 MB usermin-2.540-1.noarch.rpm 13.8 MB webmin_2.640_all.deb 26.4 MB usermin-2.540_all.deb 9.4 MB webmin-2.640.pkg.gz 36.1 MB usermin-2.540.tar.gz 15.4 MB webmin-2.640.tar.gz 36.7 MB webmin-2.640-minimal.tar.gz 3.7 MB

Add improvements to user input validation across all modules Update Authentic theme to the latest version with various improvements and fixes: Add a new airy button style to the light palette to match the dark one Fix to optimize stats server to reduce WebSocket memory usage Fix the real-time follow indicator when viewing the journal Fix regex-based match highlighting when viewing the journal Fix mail compose panel sizing in HTML mode on low-DPR screens Fix display of the 2FA QR code in the dark palette Assets File Size File Size Webmin Usermin webmin-2.630-1.noarch.rpm 33.3 MB usermin-2.530-1.noarch.rpm 13.8 MB webmin_2.630_all.deb 27.3 MB usermin-2.530_all.deb 9.4 MB webmin-2.630.pkg.gz 37.2 MB usermin-2.530.tar.gz 15.4 MB webmin-2.630.tar.gz 37.9 MB webmin-2.630-minimal.tar.gz 3.8 MB

Add a simplified UI for managing website redirects Add support for PHP-FPM workload profiles Add Kanboard and Blesta web app installers for Virtualmin Pro users Add the ability to test two-factor authentication after enrollment Fix PHP-FPM not restarting when certain custom configuration options are used in a template Fix domain expiry notifications occasionally getting stuck Fix to keep local-specific directives when restoring the Postfix configuration Fix the missing message when DKIM is enabled or disabled Fix an issue reading PHP configuration files created by a reseller Update support for Moodle 5.1 and later versions