Stable releases of October 23, 2026¶

Everything that shipped on the stable channel on October 23, 2026 — v2.10.60 through v2.10.61, newest first. v2.10.61 is what you install; the versions below it are how you get there.

Stable v2.10.61¶

Features — v2.10.61¶

Add Mail-only package type (perm_web_hosting)

Improvements — v2.10.61¶

Pin UI language in customer-modal a11y tests
Close cross-tenant website takeover via Site-level heal
Close cross-tenant domain takeover in executeRedirect/executeSite
Close cross-tenant domain takeover in executeMailOnlyDomain
Harden guard against non-ssh WebFilesRef schemes (review finding)
Harden guard against non-ssh WebFilesRef schemes (review finding)
Close Mail-only permission gaps found by review
Stop DocRoot fallback from rsyncing raw Enhance container internals into public_html
Enhance mailbox quota=0 maps to enconf's 0=unlimited convention
Block DocRoot fallback from rsyncing Enhance container internals
Enhance unlimited mailbox quota must stay 0, not 512

Stable v2.10.60¶

Improvements — v2.10.60¶

Wire subscriptionID through forwarder/FTP/DNS/cron executors
Wire subscriptionID through FTP/cron/forwarder/DNS executors
Stop mobile session card delete from bubbling to onSelectSession