HestiaCP has released version 1.10.6, focusing on security enhancements, including patches for symlink attacks and a File Manager path-traversal bug. This update also introduces ECDSA Let's Encrypt certificate support, custom DKIM selectors, and auto-patching for services like nginx and Apache, making it a robust option compared to paid control panels. The security improvements address critical vulnerabilities and bolster input validation, access control, and path handling. Overall, this "service release" emphasizes stabilization and security hygiene while maintaining its status as a free, open-source alternative for Debian and Ubuntu users

HestiaCP 1.10.6 Security Update Ships With ECDSA and Auto-Patch Support

HestiaCP 1.10.6 landed today as a security-first "service release," hardening restore scripts against symlink attacks and closing a File Manager path-traversal bug. The patch also strengthens Exim HELO checks, fixes input-validation flaws, and reworks password and redirect handling across the panel. Beyond hardening, it adds ECDSA Let's Encrypt certificate support, custom DKIM selectors, and auto-patching for hosted services like nginx, Apache, and MariaDB through unattended-upgrades. It sits atop a fast release pace from the team, offering a free alternative to paid panels like cPanel and DirectAdmin.

HestiaCP 1.10.6 Security Update Ships With ECDSA and Auto-Patch Support @ Linux Compatible