Product update: Virtuozzo PowerPanel RTM Hotfix 8 (7.0.3-151)
Issue date: 2020-08-18
Applies to: Virtuozzo PowerPanel
Virtuozzo Advisory ID: VZA-2020-057
1. Overview
The update for Virtuozzo PowerPanel introduces a security fix, a new feature, and stability and usability fixes.
2. Security Fixes
- [Moderate] PowerPanel web interface could be vulnerable to clickjacking. (PP-568)
3. New Features
- Added support for sending virtual environment IP addresses to the legacy login form in HTTP GET requests. One can now address a VE by its IP address via a URL like
https://<PowerPanel_addr>/login/ve/?host=<VE_IP_addr>. One can also specify the user name asusername=<name>. (PP-561, PP-567)
4. Bug Fixes
- Could not login to single virtual environments by hostname. (PP-558)
- Missing the ability to update backup limits for VEs via vzapi. (PP-563)
- URLs like
https://<PowerPanel_addr>/login/<random>redirected to the VE login form. (PP-566)
5. Installing the Update
Install the update by running yum update vzapi-installer && vzapi-installer upgrade http://repo.virtuozzo.com/pp/releases/2.0/x86_64/os/Packages/p/pp-release-2.0.3-6.vl7.noarch.rpm.
The JSON file with the list of new and updated packages is available at JSON file.