cPanel & WHM version 136

cPanel & WHM updates now provide ConfigServer Security & Firewall (CSF) WebPros International, LLC has created a fork of CSF (ConfigServer Security & Firewall) for cPanel & WHM. We distribute this new fork of CSF via our update mirrors. cPanel & WHM will migrate any unsupported or outdated versio…

cPanel & WHM updates now provide ConfigServer Security & Firewall (CSF) WebPros International, LLC has created a fork of CSF (ConfigServer Security & Firewall) for cPanel & WHM. We distribute this new fork of CSF via our update mirrors. cPanel & WHM will migrate any unsupported or outdated version of CSF to our supported fork of CSF. We have also added CSF as a recommendation to WHM’s Security Advisor interface (WHM » Home » Security Center » Security Advisor). For more information, read our How to Install ConfigServer Security & Firewall (CSF) documentation. Note: We backported this feature to all supported cPanel & WHM versions. Added support for MariaDB 11.8 We added support for MariaDB® 11.8. MariaDB 11.8 now appears as an option in WHM’s Upgrade Database Version interface (WHM » Home » Database Services » Upgrade Database Version). For more information, read MariaDB’s <a href="https://mariadb.com/docs/release-notes/community-server/11.8/what-is-mariadb-118" target="_blank">MariaDB 11.8 Changes & Improvements documentation. Added support for short-lived SSL certificates We added support to issue and renew short-lived certificates for all SSL certificate types (including paid certificates). These short-lived certificates expire after 47 days and renew automatically via the <a href="https://www.paloaltonetworks.com/cyberpedia/what-is-acme-protocol" target="_blank">ACME protocol. Added unified SSL/TLS interface We added cPanel’s SSL/TLS Certificates interface (cPanel » Home » Security » SSL/TLS Certificates). This interface presents a unified SSL/TLS management experience that simplifies certificate management and navigation for cPanel users. Note: We backported this feature to cPanel & WHM version 134. Added Web Log Retention interface We added WHM’s Web Log Retention interface (WHM » Account Functions » Web Log Retention). This interface provides visibility and control over all your cPanel accounts’ web server log retention settings. Note: We backported this feature to cPanel & WHM versions 126 and 134. Added combined PHP error logging and interface updates cPanel & WHM now combines each cPanel account’s PHP error logs into the ~username/logs/php.error.log file, where username is the account’s username. This behavior provides a single log file for all domains under the account and simplifies both the logging and log file-rotation processes. – Server administrators can now manage PHP error-logging across all accounts in WHM’s MultiPHP INI Editor interface (WHM » Home » Software » MultiPHP INI Editor). – cPanel users can manage logging for their account’s domains in cPanel’s MultiPHP INI Editor interface (cPanel » Home » Software » MultiPHP INI Editor). Improved visibility of EOL and hardened PHP versions We improved the visibility of EOL (End-of-Life) and <a href="https://cloudlinux.com/features/hardened-php" target="_blank">hardened PHP versions in WHM’s MultiPHP Manager interface (WHM » Home » Software » MultiPHP Manager). For more information, read our TuxCare Extended Lifecycle Support (ELS) for PHP documentation. Enabled WebPros Account global logout When you use your WebPros account to log in to your cPanel & WHM server and then log out from cPanel & WHM, the system will log you out from all WebPros Account sessions. This is consistent with the expected behavior of SSO (single sign-on) authentication systems. Updated Contact Manager with Package Manager lock notification We added a new notification for long-running package manager locks to WHM’s Contact Manager interface (WHM » Home » Server Contacts » Contacts Manager). Added SSL Certificate verification for account transfers We added the Enforce SSL peer verification for account transfers setting to WHM’s Tweak Settings interface (WHM » Home » Server Configuration » Tweak Settings). This setting controls whether cPanel & WHM verifies the SSL certificate of the source server when performing an account transfer. Added the ability to disable temporary domains We added the ability to disable temporary domains for your server. You can now disable the feature via the /var/cpanel/panel.ini file. For more information, read WHM’s Create a New Account interface (WHM » Home » Account Functions » Create a New Account) documentation. Note: We backported this feature to all supported cPanel & WHM versions. Third-party application changes For information on changes to our third-party applications, read our Third-Party Applications Updates documentation. Removed RubyGems and Ruby on Rails We removed cPanel’s RubyGems and Ruby on Rails interfaces. For more information, read our cPanel Deprecation Plan documentation. Removed ICQ notifications We removed support for ICQ notifications in WHM’s Contact Manager interface (WHM » Home » Server Contacts » Contact Manager). For more information, read our cPanel Deprecation Plan documentation. Removed DNS cluster peers SSL certificate setting We removed the Enforce SSL peer verification for DNS cluster peers setting from WHM’s Tweak Settings interface. Most administrators configure their DNS cluster peers with IP addresses rather than hostnames. While it is technically possible to obtain SSL certificates for IP addresses, cPanel & WHM does not yet provide the automation necessary to make this practical for DNS cluster environments. Enabling this setting would therefore break DNS clustering for most environments without providing a meaningful security benefit. We plan to reintroduce this functionality in a future release once the required certificate provisioning support is in place. Removed cPAddons We removed support for cPAddons. This includes the cPAddons settings in WHM’s Tweak Settings and Feature Manager interfaces. We also removed the following interfaces: * cPanel’s Site Software interface (cPanel » Home » Software » Site Software). * WHM’s Install cPAddons Site Software interface (WHM » Home » cPanel » Install cPAddons Site Software). * WHM’s Manage cPAddons Site Software interface (WHM » Home » cPanel » Manage cPAddons Site Software). For more information, read our cPanel Deprecation Plan documentation. Note: We backported this removal to all supported cPanel & WHM versions except cPanel & WHM version 110. New UAPI functions * <a href="https://api.docs.cpanel.net/specifications/cpanel.openapi/dns/dns-is_svcb_available" target="_blank">DNS::is_svcb_available – This function shows whether the server supports SVCB DNS records. * <a href="https://api.docs.cpanel.net/specifications/cpanel.openapi/auto-generated-ssl-certificates/ssl-get_autossl_renewal_status" target="_blank">SSL::get_autossl_renewal_status – This function returns the AutoSSL renewal status for a domain. * <a href="https://api.docs.cpanel.net/specifications/cpanel.openapi/domain/domain-temporary_domain_is_disabled">Domain::temporary_domain_is_disabled — This function returns whether the server allows temporary domains. Updated UAPI functions * <a href="https://api.docs.cpanel.net/specifications/cpanel.openapi/ssl-certificates/market-get_pending_ssl_certificates" target="_blank">Market::get_pending_ssl_certificates — We added the certificate ID to the function return values. We backported this changes to cPanel & WHM version 110, 126, and 134. * <a href="https://api.docs.cpanel.net/specifications/cpanel.openapi/ssl-certificates/market-process_ssl_pending_queue" target="_blank">Market::process_ssl_pending_queue — We added the certificate ID to the function return values. We backported this changes to cPanel & WHM version 110, 126, and 134. * <a href="https://api.docs.cpanel.net/specifications/cpanel.openapi/ssl-certificate-management/ssl-install_ssl" target="_blank">SSL::install_ssl — We added the certificate ID to the function return values. We backported this changes to cPanel & WHM version 110, 126, and 134. New WHM API 1 functions * <a href="https://api.docs.cpanel.net/specifications/whm.openapi/domain-management/dns-is_svcb_available" target="_blank">is_svcb_available — This function shows whether the server supports SVCB DNS records. * <a href="https://api.docs.cpanel.net/specifications/whm.openapi/360-monitoring/set_360_agent_polling" target="_blank">set_360_agent_polling — This function updates the agent360 polling settings. Deprecated WHM API 1 functions * <a href="https://api.docs.cpanel.net/specifications/whm.openapi/feature-lists/featurelists-get_available_featurelists" target="_blank">get_available_featurelists — Use WHM API 1’s <a href="https://api.docs.cpanel.net/specifications/whm.openapi/feature-lists/featurelists-get_featurelists" target="_blank">get_featurelists function. * <a href="https://api.docs.cpanel.net/specifications/whm.openapi/feature-lists/featurelists-read_featurelist" target="_blank">read_featurelist — Use WHM API 1’s <a href="https://api.docs.cpanel.net/specifications/whm.openapi/feature-lists/featurelists-get_featurelist_data" target="_blank">get_featurelist_data function. * <a href="https://api.docs.cpanel.net/specifications/whm.openapi/mail-server-settings/ssl-disable_mail_sni" target="_blank">disable_mail_sni — Use UAPI’s <a href="https://api.docs.cpanel.net/specifications/cpanel.openapi/sni-email-settings/ssl-disable_mail_sni" target="_blank">SSL::disable_mail_sni function. Removed WHM API 1 functions * verify_icq_access — We removed this function as part of the ICQ notifications removal. * verify_oscar_access — We removed this function as part of the ICQ notifications removal. Removed UAPI functions * cPAddons::get_available_addons — We removed this function as part of the cPAddons removal. * cPAddons::get_instance_settings — We removed this function as part of the cPAddons removal. * cPAddons::list_addon_instances — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::cancel_scan — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::change_admin_password — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::cleanup_scan — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::configure_autoupdate — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::get_api_version — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::get_instance_by_id — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::get_instances — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::get_latest_wordpress_version_from_wordpress_org — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::get_scan_results — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::is_installable_addon_available — We removed this function as part of the cPAddons removal. * WordPressInstanceManager::start_scan — We removed this function as part of the cPAddons removal. New scripts * /usr/local/cpanel/scripts/show_php_settings — This script returns the PHP settings for all domains on the server. * /usr/local/cpanel/scripts/mass_change_php_setting — This script updates every domain that uses a specific PHP version to another PHP version. Modified scripts The /usr/local/cpanel/scripts/maintenance script now detects package manager locks that remain active for more than 12 hours. Removed scripts /usr/local/cpanel/scripts/migrate_legacy_wordpress_to_modern_wordpress — We removed this script as part of the cPAddons removal. Upgrade blockers Ubuntu 22 You cannot upgrade to cPanel & WHM version 136 if your server runs Ubuntu® 22. If your server runs Ubuntu 22.04, you should migrate to Ubuntu 24.04 LTS via <a href="https://cpanel.github.io/elevate/" target="_blank">ELevate, then upgrade to cPanel & WHM version 136. For more information, read our cPanel Deprecation Plan documentation. Note: cPanel & WHM version 136 supports the following operating systems: * AlmaLinux OS 8. * AlmaLinux 9. * AlmaLinux 10. * CloudLinux™ 8. * CloudLinux 9. * CloudLinux 10. * Ubuntu 24.04 LTS. Package Manager locks You cannot upgrade to cPanel & WHM version 136 if your Package Manager is actively holding locks. You must remove the active locks to proceed. For more information, read our Package Manager Locks documentation.