DirectAdmin 1.701

[fln]

We are happy to announce the release of DirectAdmin 1.701.

A full release change log is here:

DirectAdmin 1.701​

The update should be automatically available for all installations subscribed to the current release channel.

We appreciate all the feedback on forums and issues reported in the ticketing system.

Thanks!

 

[deanc]

big issue after update exim panic none stop exim stop on que -

2026-05-05 09:50:24 1wK9bs-00000000Nl1-2JTl User 0 set for local_delivery transport is on the never_users list2026-05-05 13:27:05 1wKCzZ-00000000PUZ-3eMU User 0 set for local_delivery transport is on the never_users list2026-05-05 13:27:05 1wKCzZ-00000000PUe-3lut User 0 set for local_delivery transport is on the never_users list2026-05-05 13:59:12 1wKDUe-00000000Pl5-2D6K User 0 set for local_delivery transport is on the never_users list2026-05-05 13:59:12 1wKDUe-00000000PlA-2Jb4 User 0 set for local_delivery transport is on the never_users list2026-05-05 15:56:55 SIGSEGV (fault address: (nil))2026-05-05 15:56:55 SEGV_MAPERR2026-05-05 15:56:55 SIGSEGV (null pointer indirection)2026-05-05 15:56:55 SIGSEGV (fresh-exec: 313787 initializing)2026-05-05 15:56:55 backtrace2026-05-05 15:56:55 ---2026-05-05 15:56:55 /usr/sbin/exim(+0x58e84) [0x557bde028e84]2026-05-05 15:56:55 /usr/sbin/exim(+0x59080) [0x557bde029080]2026-05-05 15:56:55 /lib64/libpthread.so.0(+0x12990) [0x7fcfcbb21990]2026-05-05 15:56:55 /usr/sbin/exim(+0x77cf9) [0x557bde047cf9]2026-05-05 15:56:55 /usr/sbin/exim(+0x5bba1) [0x557bde02bba1]2026-05-05 15:56:55 /lib64/libc.so.6(__libc_start_main+0xe5) [0x7fcfcb36b865]2026-05-05 15:56:55 /usr/sbin/exim(+0x326fe) [0x557bde0026fe]2026-05-05 15:56:55 ---2026-05-05 16:01:19 SIGSEGV (fault address: (nil))2026-05-05 16:01:19 SEGV_MAPERR2026-05-05 16:01:19 SIGSEGV (null pointer indirection)2026-05-05 16:01:19 SIGSEGV (fresh-exec: 314279 initializing)2026-05-05 16:01:19 backtrace2026-05-05 16:01:19 ---2026-05-05 16:01:19 /usr/sbin/exim(+0x58e84) [0x5634691d1e84]2026-05-05 16:01:19 /usr/sbin/exim(+0x59080) [0x5634691d2080]2026-05-05 16:01:19 /lib64/libpthread.so.0(+0x12990) [0x7f927c9f6990]2026-05-05 16:01:19 /usr/sbin/exim(+0x77cf9) [0x5634691f0cf9]2026-05-05 16:01:19 /usr/sbin/exim(+0x5bba1) [0x5634691d4ba1]2026-05-05 16:01:19 /lib64/libc.so.6(__libc_start_main+0xe5) [0x7f927c240865]2026-05-05 16:01:19 /usr/sbin/exim(+0x326fe) [0x5634691ab6fe]2026-05-05 16:01:19 ---2026-05-05 16:05:40 SIGSEGV (fault address: (nil))2026-05-05 16:05:40 SEGV_MAPERR2026-05-05 16:05:40 SIGSEGV (null pointer indirection)2026-05-05 16:05:40 SIGSEGV (fresh-exec: 314670 initializing)2026-05-05 16:05:40 backtrace2026-05-05 16:05:40 ---2026-05-05 16:05:40 /usr/sbin/exim(+0x58e84) [0x55e6e4f8ae84]2026-05-05 16:05:40 /usr/sbin/exim(+0x59080) [0x55e6e4f8b080]2026-05-05 16:05:40 /lib64/libpthread.so.0(+0x12990) [0x7f0ad5ef6990]2026-05-05 16:05:40 /usr/sbin/exim(+0x77cf9) [0x55e6e4fa9cf9]2026-05-05 16:05:40 /usr/sbin/exim(+0x5bba1) [0x55e6e4f8dba1]2026-05-05 16:05:40 /lib64/libc.so.6(__libc_start_main+0xe5) [0x7f0ad5740865]2026-05-05 16:05:40 /usr/sbin/exim(+0x326fe) [0x55e6e4f646fe]2026-05-05 16:05:40 ---

 

[fln]

Thanks @deanc, we are already patching Exim 4.99 and 4.99.1 to fix this issue. We expected it to be fixed in Exim 4.99.2 and no longer apply this patch. However, this bug is still rpesent in Exim 4.99.2 and we missed it .

This issue is fixed in main Exim repository, but they keep releasing patch releases without backporting this fix.

Thank you for quickly reporting this, a new build is released that makes sure we continue patching Exim 4.99.2 to fix this issue.

da update
da build exim

 

[ju5t]

Might be worth it to include in the changelog that the Apache upgrade has priority: https://nvd.nist.gov/vuln/detail/CVE-2026-23918.

 

[fln]

DA comes with a patch for the double free bug in http2 library (CVE-2026-23918) since DirectAdmin version 1.692. So Apache 2.4.66 built with CustomBuild has this issue fixed already (custombuild/patches/apache/apache-2.4.66-bug-69899-mod_http2-update-to-version-2.0.37.patch).

We pushed out this release with Apache 2.4.67 because of CVE-2026-24072.