Add a global per-user ACL control to block URL downloads from non-public IP addresses in File Manager, Mailboxes, and Upload and Download modules Fix to recognize hex numeric HTML entities to work in various elements Fix patch sub-command to reload Webmin instead of restarting, making it possible to run from Terminal module Fix SSL certificate and TCP monitors to report transient connection failures as down, and SSL check timeouts as timed out, rather than uninstalled Fix local file imports to enforce file access ACLs in Users and Groups, LDAP Users, MySQL/MariaDB, and PostgreSQL modules Fix Webmin user switching and session checks to find sessions stored with HMAC session keys Fix Usermin user switching to use one-time login URLs instead of the legacy cookie handoff and service restart flow Fix APT package architecture suffix handling to avoid false package update failure reports Fix missing Maildir folders to be counted as empty in Mailboxes module Fix Postfix version comparisons to handle version strings safely Fix SELinux labeling for Webmin and Usermin runtime data Update the Authentic theme to the latest version with various improvements: Fix inconsistent gaps around rounded UI elements Fix CPU usage values exceeding 100% in the dashboard Fix File Manager remote downloads to respect download address restrictions Fix spacing in the login page welcome message Assets File Size File Size Webmin Usermin webmin-2.652-1.noarch.rpm 32.5 MB usermin-2.551-1.noarch.rpm 13.8 MB webmin_2.652_all.deb 26.7 MB usermin-2.551_all.deb 9.4 MB webmin-2.652.pkg.gz 36.3 MB usermin-2.551.tar.gz 15.4 MB webmin-2.652.tar.gz 37.1 MB webmin-2.652-minimal.tar.gz 3.7 MB

Fix Certbot-backed certificate requests and renewals to correctly parse PEM paths after issuance Fix live activation of Linux bond interfaces #2777 Update the Authentic theme to the latest version with various improvements and fixes: Fix search-result all-items delete in File Manager Fix search-result delete ordering in File Manager Fix to speed up search-result deletion cleanup in File Manager Assets File Size Webmin webmin-2.651-1.noarch.rpm 32.5 MB webmin_2.651_all.deb 26.7 MB webmin-2.651.pkg.gz 36.3 MB webmin-2.651.tar.gz 37.1 MB webmin-2.651-minimal.tar.gz 3.7 MB

Add new Systemd Services and Units module Add new GRUB 2 Boot Loader module Add new Kea DHCP Server module Add WebSocket proxy support to the Webmin Servers Index module Add basic Alpine Linux support Add IP-based Let’s Encrypt certificate support with Certbot 5.3 Add editable SSH public keys for newly added Unix users in Users and Groups module Add improvements to custom Webmin temporary directory handling Add quick service and port forwarding controls to the nftables module Add optional pre- and post-scripts for scheduled package updates Add option to control when scheduled package update email is sent Add per-user RPC/API-only access option to the Webmin Users module Add Apache 2.4 MPM process limit directives #1821 Add dhcpcd network backend for Debian and Raspberry Pi OS #1607 Add hardware RAID passthrough devices config in the SMART Status module #1704 Update Xterm.js to fix Control-C handling on iPadOS/Safari terminals Update Webmin systemd service unit to run without forking Fix IPv6 CIDR access control matching #1570 Fix Bootup and Shutdown module to show only services and not all units on systemd systems Fix Let’s Encrypt renewal scheduling to count from the last successful request Fix NetworkManager detection on Debian and IPv6 DNS nameserver saving Fix Dovecot configuration file handling when saving extra configs Fix mailbox listing to skip unusable Maildir entries and remove stale deleted or moved entries Fix Postfix module labels to identify virtual alias maps instead of virtual mailbox domains #1541 Fix Apache module to hide disabled default virtual hosts from the active server list Fix Netplan DNS saving to preserve YAML structure Fix BIND DNS handling of underscores, trailing dots, and mass record length checks Fix MariaDB user creation when using auth plugin syntax Fix PHP-FPM monitor on EL systems when using /etc/php.ini as the config file Fix RPC-only accounts to block browser/module access before module ACL checks Fix reflected XSS in Webmin status messages Fix authentication state handling for SSL certificate logins and proxied keep-alive requests Fix path validation in File Manager, package delete helpers, and Apache virtual host files Update the Authentic theme to the latest version with various improvements and fixes: Add zooming to stats history graphs by holding shift and scrolling in the dashboard Add support for saving live stats history for up to 24 hours without performance impact Add better support for the new Nginx, nftables, and upcoming systemd, Kea-DHCP, and GRUB 2 Webmin modules Add ability to always show available dashboard panels in theme configuration Add support for live stats and terminal WebSocket connections through Webmin Servers Index proxy links Fix proxying when Webmin is accessed with a webprefix using Webmin Servers Index module Fix theme UI helpers to escape generated markup more safely Fix iOS terminal viewport sizing Fix editor save handling, clean-state indication and dirty reload guard Fix popover positioning, z-index and border color for help bubbles Fix the active product switch border in the navigation menu for the dark palette Fix to validate password reset return URLs Assets File Size File Size Webmin Usermin webmin-2.650-1.noarch.rpm 32.5 MB usermin-2.550-1.noarch.rpm 13.8 MB webmin_2.650_all.deb 26.7 MB usermin-2.550_all.deb 9.4 MB webmin-2.650.pkg.gz 36.3 MB usermin-2.550.tar.gz 15.4 MB webmin-2.650.tar.gz 37.1 MB webmin-2.650-minimal.tar.gz 3.7 MB

Add support for trusted proxy IP addresses Fix bugs when editing monitors in the System and Server Status module Fix skip hwclock when unavailable #2693 Update Authentic theme to the latest version with bug fixes: Fix issue where the log type cannot be selected in the System Logs module Assets File Size webmin-2.641-1.noarch.rpm 32.2 MB webmin_2.641_all.deb 26.4 MB webmin-2.641.pkg.gz 36.1 MB webmin-2.641.tar.gz 36.7 MB webmin-2.641-minimal.tar.gz 3.7 MB

Add new nftables module with profiles, saved tables, and chains/sets management Add new Nginx module with look and feel matching the Apache module Add option to hide sensitive values (like passwords or tokens) from Webmin’s request logs Add custom ACME server support for Webmin SSL renewal Add support for the latest MariaDB on Ubuntu 26.04 Add multi-statement SQL query support when executing inline in MySQL/MariaDB module Add support for ext4 hidden inode quota mode Add used space and usage percentage reporting for ZFS in the dashboard Add mass enable and disable buttons for status monitors in the System and Server Status module Update tiny ACME client to the latest version Update DHCP default config for openSUSE 16 #2678 Fix to prevent bypassing two-factor authentication in RPC requests Fix session cookies to use safer defaults Fix handling of connections coming through a reverse proxy Fix unsafe mailbox attachment handling in Mailbox module Fix unsafe decoding of Outlook winmail.dat attachments Fix Certbot standalone port conflicts Fix to correctly preserve full quoted action parameters in the Fail2Ban jail editor #2647 Fix Fail2Ban default jail options to preserve required timing defaults when saving Fix ZFS to fall back to df when disk space cannot be computed from zpool Fix to allow toggling process priority and I/O controls on or off Fix issue where disabled email notifications were still being processed Update Authentic theme to the latest version with various improvements and fixes: Upgrade stats history graphs from laggy SVG to a blazing-fast canvas renderer Add option to control corner roundness for the menu, content area and right-side slider Change the content area to use rounded corners and a margin by default Fix message of the day display in login page correctly webmin#2555 Fix tooltip visibility in dark palette Fix session login button spinner Fix various button styling issues (active state, tiny buttons, airy buttons, stack position) Assets File Size File Size Webmin Usermin webmin-2.640-1.noarch.rpm 32.2 MB usermin-2.540-1.noarch.rpm 13.8 MB webmin_2.640_all.deb 26.4 MB usermin-2.540_all.deb 9.4 MB webmin-2.640.pkg.gz 36.1 MB usermin-2.540.tar.gz 15.4 MB webmin-2.640.tar.gz 36.7 MB webmin-2.640-minimal.tar.gz 3.7 MB

Add improvements to user input validation across all modules Update Authentic theme to the latest version with various improvements and fixes: Add a new airy button style to the light palette to match the dark one Fix to optimize stats server to reduce WebSocket memory usage Fix the real-time follow indicator when viewing the journal Fix regex-based match highlighting when viewing the journal Fix mail compose panel sizing in HTML mode on low-DPR screens Fix display of the 2FA QR code in the dark palette Assets File Size File Size Webmin Usermin webmin-2.630-1.noarch.rpm 33.3 MB usermin-2.530-1.noarch.rpm 13.8 MB webmin_2.630_all.deb 27.3 MB usermin-2.530_all.deb 9.4 MB webmin-2.630.pkg.gz 37.2 MB usermin-2.530.tar.gz 15.4 MB webmin-2.630.tar.gz 37.9 MB webmin-2.630-minimal.tar.gz 3.8 MB

Add a simplified UI for managing website redirects Add support for PHP-FPM workload profiles Add Kanboard and Blesta web app installers for Virtualmin Pro users Add the ability to test two-factor authentication after enrollment Fix PHP-FPM not restarting when certain custom configuration options are used in a template Fix domain expiry notifications occasionally getting stuck Fix to keep local-specific directives when restoring the Postfix configuration Fix the missing message when DKIM is enabled or disabled Fix an issue reading PHP configuration files created by a reseller Update support for Moodle 5.1 and later versions

Add ability to migrate Webmin monolithic to modular while keeping enabled modules for the new repository

Fix to prevent NAT from dropping idle RPC sessions during long transfers Fix to improve the message when socket authentication is used in the MySQL/MariaDB module Fix to make upload tracking work correctly in all situations and on all systems Fix to correctly display the PHP version in the PHP Configuration module when managing packages Update Xterm.js to the latest version with lots of improvements and fixes Update Authentic theme to the latest version with various improvements and fixes: Fix the support for the cloned Terminal module Fix error handling for file uploads when the user is out of quota or the system is out of disk space in the File Manager module Fix to stop loading full file into memory for upload check to prevent memory leak on large uploads in the File Manager module Fix to permanently save the state of the navigation menu and right-side slider when toggled Assets File Size File Size Webmin Usermin webmin-2.621-1.noarch.rpm 33.3 MB usermin-2.521-1.noarch.rpm 13.8 MB webmin_2.621_all.deb 27.3 MB usermin-2.521_all.deb 9.4 MB webmin-2.621.pkg.gz 37.2 MB usermin-2.521.tar.gz 15.4 MB webmin-2.621.tar.gz 37.9 MB webmin-2.621-minimal.tar.gz 3.8 MB

Add support for systemd resource limits for Virtualmin Pro users Add support for SFTP backups and restores, including the ability to purge SFTP backups Add support for paginated display of large user lists Add backup signing improvements, including the ability to skip signing when necessary Add option to forward the original HTTP hostname when proxying requests Add phpMyAdmin integration (if installed) when editing databases for virtual servers Add a row showing when and why a domain was disabled in the virtual server summary Add improvements to ACME service notifications Add reseller access to edit PHP-FPM configs Add improvements to handling of remote/cloud DNS hosting Fix validation of A and AAAA DNS records when using modify-dns CLI Fix reliability of remote backups during long-running tasks using Webmin RPC Fix several DKIM-related issues Fix handling of EC SSL certificates Update the repo setup script and workflow to match the newer packaging/CI layout