We’ve noticed that our release on 2018-03-21 may have broken autoupgrade feature on selected installations. We’ve just released new patch release (2018-03-22) to address this problem, but if you are experiencing problem where screen hangs on the message “Update progress…” below you can find information how to easily fix it.
Within last few hours we’ve been notified about potential LFD security threat that affects HostBill installations, caused by one of used libraries.
Although its severity really depends on server configuration we cannot leave our users at risk – we take security very seriously.
Download patch from here: http://hostbillapp.com/clientarea/patches/hostbill_patch3.8.0_3426.zip (for version 3.8).
Patching process is simple – extract archive contents in main HostBill directory, no db updates/install is required.
Dear Clients!
HostBill 2.x security patch.
Last night one of our clients notified us about potential security threat affecting HostBill versions 2.x, which may allow to access admin area with previously stolen session cookie.
Please download this patch as soon as possible: https://hostbillapp.com/clientarea/index.php?cmd=module&module=downloads&file=11
To apply patch please extract archive contents in your HostBill directory, or upload its contents directly to your install (there is only one file that requires overwriting).
HostBill users recently reported issue with OnApp 2.1RC4 module.
Problem:
When creating billing plan using API it’s not possible to create machine as a client, as OnApp throws HTTP500 + bad response error.
Solution:
We’ve created patch for OnApp Full-Featured module 2.1. To apply it please download your copy of module again from our client area, and extract archive contents in main HostBill directory.
Patch drawbacks:
This patch hard-codes clients’ cpu-shares to unlimited (it’s not setting cpu-shares limit in OnApp), and for new machines created from HostBill client area it sets cpu-share to 1, despite of slider settings.
