Webmin version 1.810 released

Update was ok but at the end there was a lot of errors based on authentic theme.

If you tested this and its supposed to happen then you should point that out and not just silently leave to us to wonder if the update was ok or not. Please raise up the level of your communication when it comes to software updates.

Hi Joe,

Sorry to belabor this point but I really think it needs to be said. First I'm a happy virtualmin customer and have been for years. I think it's truly amazing the work you guys are doing with such a small team. With that being said something has to be done about the communication of security issues.

Because of the last authentic theme issue I was forced to disable access to webmin/virtualmin. It's possible to do that in my environment so I guess it doesn't mean much coming from me but I'm sure it's not possible in a lot of environments. I'm not saying that I don't have a lot of virtualhosts but I tend to do the management for my clients.

Recently there was a security issue with WHMCS. To that end I got an email from then saying "We found a security issue please update". When I got the email I stopped what I was doing and applied the patch.

I just happened to check for updates today and noticed the new webmin update (I was out of the office for most of the day). Anyway I immediately came here and looked to see:

• Fixed a security bug in the new Authentic theme that could be exploited by non-root Webmin users.

I realize this doesn't affect me but I also don't want insecure code running on my servers. As a customer I really feel this warrants an email so that we can update right away. I also realize that my being out of the office there would have been nothing I could do about such email but it shows that you are trying to inform me because I've purchased software from you.

Again I'm not trying to add insult to injury here but it just doesn't seem right that I have to come to the news forum to find out about security updates. I really think it's the responsibility of the vendor to fix the issue (which you have done) and the important part is to inform the consumer. The latter is the part that I think is missing here and as a customer I'd really love to see that addressed!

Thank you guys for everything not trying to be an a** here just voice my concerns!

Hi Joe,

Thank you! I think a mailing list would be great, but I also understand that dealing with it and managing it is no fun either :). Personally I don't want to take you guys away from what you do best so my suggestion isn't to create more work just a simple way to keep us informed about critical issues.

Honestly I don't want to section out GPL people since they could potentially be affected by it as well but I guess that's another discussion :). Personally I look at it as I've bought software & updates from you guys so in some way or another I've given you permission to communicate with me. Believe me I love that you guys don't pester me with emails but if you did I'd only request that you'd provide a way out of the ones I don't want.

I don't have that many customers but I have enough for me and one time I forgot to BCC everyone. It's the first time in a 20+ year career I screwed up (in that way ugh). That was when I switched to using mailchimp for customer updates. It basically ensures, for me, I won't do something like that again. I don't use any of their fancy features and keep my emails plain text but I find it to be a great way to communicate with my clients. Again may not be a solution since you'd probably have to go on the paid plan because of the number of customers you have but just an idea.

I'm happy to help in anyway I can so please let me know & thanks again!