http://wiki.blueonyx.it/ 2026-10-26T02:16:33+00:00 http://wiki.blueonyx.it/ http://wiki.blueonyx.it/_media/wiki/dokuwiki.svg text/html 2026-10-23T05:41:21+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.blueonyx.it/userguide/compliance/dashboard/advisories/php2shell?rev=1792734081&do=diff PHP 8.x: out-of-memory and global-state corruption CVE-2026-109618 and CVE-2026-109619 · published 21 October 2026 · every PHP branch we ship is affected - 5.4 through 8.5 - and every one of them has a fixed build. Two vulnerabilities in PHP's request lifecycle allow unauthenticated remote code execution. Both were disclosed on 21 October 2026 and fixed across the supported branches the same week. We have published fixed builds for every PHP branch we ship, and the text/html 2026-10-23T05:32:24+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.blueonyx.it/userguide/compliance/dashboard/advisories?rev=1792733544&do=diff Advisories Each page documents one advisory: what upstream published, the builds that carry the fix, and how to tell whether a server is affected. The state of every server is shown on the Compliance dashboard. PHP * PHP 8.x: out-of-memory and global-state corruption (CVE-2026-109618, CVE-2026-109619) - published 21 October 2026. Critical, unauthenticated remote code execution. Fixed builds for every branch we ship. text/html 2026-10-23T05:32:12+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.blueonyx.it/userguide/compliance/dashboard?rev=1792733532&do=diff Compliance dashboard Advisory list: PHP and component advisories The Compliance page reports the patch state of every PHP runtime on this server: the PHP behind each site, the PHP the Admin GUI runs on, and the distribution's own PHP. It reads the installed build, compares it against the builds that carry the fixes, and tells you whether each one is patched, behind, or exposed. text/html 2026-10-20T07:03:12+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/sitestats/summarynetwork?rev=1792479792&do=diff . Network Usage The Network page under Usage Information shows server-wide network traffic statistics. It replaces the previous Analog-based network reports and uses nftables accounting instead. Location Navigation: Server Management → Usage Information → Network text/html 2026-10-06T23:40:37+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/backupcontrol/desktopcontrol?rev=1791330037&do=diff Server Desktop Server Management > Maintenance > Server Desktop This page allows you to configure how the GUI will be accessible. You can force it to be accessible only by HTTPS or only HTTP. By default it is accessible both ways. You can also tick the checkbox for “Redirect to server-name text/html 2026-10-06T23:40:34+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/vsite/phpconfig?rev=1791330034&do=diff PHP Settings Server Management > Security > PHP Settings This page allows you to configure security and performance related settings of PHP. These changes are applied to your php.ini config file of PHP. Please keep in mind that PHP is very powerful and can often be used to exploit a server. Hence we configure it in a very restrictive and secure fashion. You can loosen these restrictions on a per site basis in the text/html 2026-09-29T00:36:41+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/email/blacklist?rev=1790642201&do=diff Blacklist service Server Management > Network Services > Email > Blacklisting > Add / Modify This form adds or edits one DNSBL used by the mail server. The list of services and the DNSBL block threshold live on the Email Server Settings — Blacklisting tab. Blacklist service Enter the fully-qualified host name of the DNSBL, for example text/html 2026-09-29T00:36:39+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/email/emailsettings?rev=1790642199&do=diff Email Server Settings Server Management > Network Services > Email The Email Server Settings allows the configuration of various email related functions on the BlueOnyx server. These services are divided between four sub-tabs: * * * * BlueOnyx uses Sendmail as its SMTP agent and text/html 2026-09-06T23:40:23+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/user/personalemail?rev=1788738023&do=diff Admin Email BlueOnyx > Personal Profile > Email There are four options available in the Email “Basic Settings” section: Email Forwarding, Vacation Message, and Anti-Spam. In addition, BlueOnyx includes an IMAP Synchronization feature. Note: The Anti-Spam tab is only available if the text/html 2026-09-06T23:40:21+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/user/usermod?rev=1788738021&do=diff Modify User BlueOnyx > Site Management > User List > Modify User Configure the settings in the Modify User Settings screen (Account tab). * Full Name: Enter the full name of the user. Please enter any characters except colons. For example, John Doe is a valid entry. * New Password text/html 2026-09-06T23:40:18+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/rspamd/rspamdsettings?rev=1788738018&do=diff AV-SPAM (Anti-Spam) The AV-SPAM module provides advanced spam and virus filtering for your BlueOnyx mail server using Rspamd, a modern, high-performance spam filtering engine. This replaces the older SpamAssassin-based solution with a faster, more accurate, and easier-to-configure system. text/html 2026-08-27T23:38:38+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/vsite/vsiteemail?rev=1787873918&do=diff Email BlueOnyx > Site Management > Services > Email This menu item is used to configure email options for a virtual site. Click here to configure email options such as site aliases. * Disable Email for Domain: This will disables the ability for the domain to receive emails text/html 2026-08-27T23:38:35+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/rspamd/rspamdrules?rev=1787873915&do=diff AV-SPAM Rules The AV-SPAM Rules page allows you to view, search, and manage Rspamd filtering rules at different scopes. This is an add-on feature of the AV-SPAM module. Overview The AV-SPAM Rules page is found under Server Management > AV-SPAM > Rules (or via the scope selector). It provides a centralized interface for reviewing the active rule sets that Rspamd uses to evaluate incoming mail. text/html 2026-08-24T02:19:31+00:00 Michael Stauber (mstauber@blueonyx.it@undisclosed.example.com) http://wiki.blueonyx.it/userguide/email/start?rev=1787537971&do=diff Email This section covers email related features of BlueOnyx. * AV-SPAM (Anti-Spam) — Configure spam filtering with Rspamd * AV-SPAM Stats — View spam filtering statistics ----------