Release Notes: 2.2.4 → 2.2.24 (aggregate summary on one topic)

ZemoCA 25.09.2026 18:36

Hello, sir, there have been many versions in the last few days, we have not announced them separately — here they are all together. The current most current version is 2.2.24.

Although there were simple minor updates, I did not need to discuss each of them separately because each of them has a separate package detail and feature.

Critical releases (containing safety or crash correction): 2.2.5, 2.2.6, 2.2.7, 2.2.8, 2.2.9, 2.2.10, 2.2.11, 2.2.12, 2.2.13, 2.2.14, 2.2.15, 2.2.16, 2.2.18, 2.2.23. If you are on an older version, simply update directly to 2.2.24, no need to switch to intermediate versions one by one.

Installation / Appearance

  • 2.2.4 — Zip setup wizard, AACP → View settings (logo/color/navbar), redesigned mail-DNS tools page, spam score with indicator.
  • 2.2.5. Critical — The CSS file that 2.2.4 deleted on the server has been restored, sites are reopening.
  • 2.2.6 — The update no longer opens back the modules you closed.

Security Audit

  • 2.2.10 Critical — End-to-end security scan: Redis password plaintext leak, session conflict in shared Redis, account status disclosure from login screen, XSS hidden in AI translation + forum bio, SSRF vulnerability in DNS tools. They were all shut down, none of them abused.

Update engine (long-term series of corrections)

  • 2.2.7, 2.2.9, 2.2.11, 2.2.12, 2.2.13, 2.2.14, 2.2.15, 2.2.16, 2.2.17, 2.2.18, 2.2.19 (most of them critical) — We chased the "site gives 500 after updating/ update requires two clicks" issue to its root cause. Brief summary: during an update it was problematic that the compiled container was cleaned at the wrong time and eight different locations handled it inconsistently — it now goes through a single, guaranteed mechanism. The detailed story is on the blog.

Security Center & Visitor Statistics

  • 2.2.20 — Security logs and visitor counts are no longer in separate tables, they do not delete each other. Forum top ribbon moved to bottom.
  • 2.2.21 — Security Center now has a live threat stream. Visitor count moved to optional module.
  • 2.2.22 — Security Center was a single card + two tabs. Bar charts have arrived on VisitorStats.
  • 2.2.23 Critical — Registration email verification no longer locks the entry of existing accounts (separate settings). Fixed admin registration crash and silent forum 403 error with empty bio.
  • 2.2.24 — VisitorStats charts refreshed: daily view line/area chart, monthly view bar chart.

To update: → Update AACP → Updates. Schema changes are applied automatically, no need to do anything manually. If you have any questions, write here.

Forever CPalius **