Hello SysCP-community,
as the last release includes some nasty bugs we are releasing a new version of SysCP now. It contains the follwing bugfixes:
Safemode will be added again to vhosts at cron_tasks, formtoken is now correctly inserted into all admin_customer-scripts, so editing/adding a customer won't end with "The request seems to be compromised." and the installer now sets the mysql-access-hosts correctly.
These are all nasty bugs, so I'm sure all of you will update. But I also want to state, that with the safemode not being inserted in the vhosts your server might have a big problem, when safemode isn't activated globally. Therefore consider SysCP 1.2.17 insecure (1.2.16 isn't affected though) and update immediately if you're already using it!
As always you'll find the packages at http://files.syscp.org. Direct link to the tarball is: http://files.syscp.org/releases/tgz/syscp-1.2.18.tar.gz. Debian users will get it with their next apt-get upgrade.
Flo and the SysCP-team