Issue Clarification

[Franknfurter]

Hi Folks,

After last week’s emergency upgrade to php 8.5.12 in plesk 18.0.81 (note previous version of plesk was not 18.0.80), I suddenly discover the Anniversary sticker function presenting itself switched on.

I have never seen this sticker function before and I certainly wouldn’t have edited panel.ini to have I switched on (I note from a blog or forum post that this was quickly switched off by default in August due to its bad reception).

My question is, has last Wednesday’s vulnerability been utilised on my box?

Thanks

 

[Sebahat.hadzhi]

Hi, @Franknfurter . The stickers are switched off remotely and according to our team for the situation you describe is it very likely that the remote override didn't reach your server or it has been removed. You can manually switch them off by adding the following to panel.ini:

[product]
noFun = true

This is not an indication that your server didn't receive the vulnerability updates.

 

[Franknfurter]

Thanks for that Sebahat.

In this instance, 18.0.80 was never installed on the box and the updates were done on Friday last.

My question isn’t so much did the system get updated to 8.5.12 (which I know it did) but how did these stickers suddenly appear?

 

[Sebahat.hadzhi]

Since you directly jumped to 18.0.81, that's the first version which ships with the stickers switched on in code. The “off by default” change was not made in the product itself, but as a remote override pushed to users' servers. Our team's assumption is that the override didn't reach your server or it has been removed for some reason.

P.s. From Plesk Obsidian 18.0.82 the feature will be off by default in the product itself.