Skip to main content

v2.1.0

· 3 min read

View this release on GitHub

What's new​

PHP Security Update​

The application updater now attempts to upgrade existing PHP 8.4 installations to PHP 8.4.27 or newer. PHP 8.4.27 addresses CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities described in the official PHP security advisory.

Highlights

  • Upgrade installed PHP 8.4 packages on Debian 11, 12, and 13 using the server's configured package repositories.
  • Preserve existing PHP configuration files.
  • Check the installed CLI and PHP-FPM versions and restart PHP-FPM after a successful package update.
  • Request restarts of the standard long-running FS PBX PHP services after a verified update.
  • Show a warning and a retry command if the PHP update cannot be verified.

Expanded Email Logs and Attachment Resends​

Email log entries now provide a more complete view of the message and its delivery information.

Highlights

  • Review sender, recipients, subject, status, timestamps, and provider details.
  • View the rendered email, plain-text body, or HTML source.
  • Review send errors and retries, with access to provider events when available.
  • See recorded attachments and identify missing files.
  • Resend newly logged fax and voicemail emails with their original attachments when the referenced files are still available.

Attachment resends use the original stored files. Older log entries without attachment references cannot recover their attachments, and missing files are skipped when resending.

Edit Contacts While Sending a Fax​

Added an Edit contact action to the contact picker in the fax composer.

Highlights

  • Update a contact's name, company, and selected phone or fax number.
  • Change whether the contact is private or shared with everyone in the account.
  • Return to the refreshed contact list after saving.
  • Refresh the selected recipient's contact details when an edit affects it.

Making a shared contact private transfers it to the user saving the change and removes access for other users in the account.

Improvements and fixes​

  • Fixed escaped apostrophes and other HTML entities appearing in plain-text email content.
  • Reset the email-log date range along with the other filters.
  • Refresh expanded email details after a resend and preserve the current log page.

Upgrade notes​

  • Check the PHP update result in the application-update output. The application update continues if package installation fails, so a successful FS PBX update alone does not confirm that PHP was patched.

  • If the PHP update reports a warning, resolve the reported package or repository issue and retry from Bash:

    sudo bash /var/www/fspbx/install/install_php.sh --upgrade-only

  • The PHP update restarts PHP-FPM. Restart any additional long-running PHP workers managed outside the standard FS PBX update process; when using the standalone retry command, also restart the standard PHP workers.

  • Fax and voicemail attachment references are recorded for emails sent after this change is loaded. Restart queue workers when deploying outside the normal application-update process.