Skip to main content

CommyPanel 0.2.2

A patch release for 0.2.1. 0.2.1 could not be installed or upgraded: the installer wrote an nginx setting that nginx refused, so it undid the change and stopped. Nothing was broken on servers that tried it, but they stayed on their old version. Upgrade to 0.2.2 instead; it has everything 0.2.1 announced.

Fixes​

  • Upgrade and install failed with "fastcgi_busy_buffers_size must be less than...". The panel's nginx site raised the response header buffer to fix the 502 on page reload, but not the buffers it has to fit in. Fixed.

Included from 0.2.1​

  • PHP security updates. The installer upgrades PHP and checks that the build has the fix for PHP2Shell (CVE-2026-109618 and CVE-2026-109619). A fresh install stops if it does not; an upgrade warns and tells you to run sudo apt-get update && sudo apt-get upgrade. COMMYPANEL_ALLOW_VULNERABLE_PHP=1 installs anyway, at your own risk.
  • PHP pool hardening for the two features those flaws go through.
  • 502 when reloading an app page is fixed: the panel no longer sends the oversized preload headers.

Before you upgrade​

Run sudo commypanel upgrade. If the installer warns that PHP is out of date, run sudo apt-get update && sudo apt-get upgrade and restart PHP-FPM.

Requirements​

Unchanged: Ubuntu 24.04 or 26.04, or Debian 13 or newer, with systemd; amd64 or arm64; root access; at least 1 GB of RAM.