Matomo 5

Release Notes

EGL Build 260915.1

15 September 2026

NEW Matomo is already installed when the instance finishes starting. Your administrator account and your first site are created for you, so there is no browser setup wizard to work through. The previous build delivered the web stack only and left you to complete Matomo’s own eight step installer.

NEW Containerized build: Matomo now runs in Docker on AlmaLinux 10. The application and its database are containers, so an application update no longer means replacing the instance.

NEW Free SSL and your own domain in one command. Run egl-setup-domain.sh.x and a Let’s Encrypt certificate is obtained and renewed automatically, with HTTP redirected to HTTPS.

NEW A first site named My website is created during installation, so Matomo has something to show you and the tracking code is one screen away.

FIXED Scheduled report processing now points at your own instance. The previous build wrote the scheduled job using the public address of the machine that built the image, which is not your address, so the job pointed somewhere else entirely.

FIXED Associating a domain no longer risks taking the site off the air. Matomo refuses any request arriving under a name it has not been told to trust, and the domain tool adds your domain to that list. It also keeps the internal name in place, so your report processing continues uninterrupted.

FIXED Private files are no longer reachable over the web. Your configuration file, which holds the database password and the key that signs every sign-in, is refused, along with the cache and internal directories. Only your pages and the tracking endpoint answer.

FIXED The listing no longer names a firewall the image does not contain. Firewalld was listed as pre-bundled and was not installed.

IMPROVED The database is no longer reachable from the internet. It runs on a private network inside the instance with no published port, and port 3306 no longer needs to be open. Neither do ports 465, 587, 993 and 995: Matomo connects out to your mail server and the reply is already permitted. The recommended inbound ports are now only 22, 80 and 443.

IMPROVED Two mistyped port ranges have been removed from the recommended security group. They opened more than a thousand ports between them.

IMPROVED Matomo 5.13.0 on PHP 8.2 and MariaDB 11.4, all fixed in the image. Previously each instance downloaded whatever Matomo release was current on the day it was launched, so no two were alike.

IMPROVED Installation no longer depends on a single download source. If one is unavailable the installer falls back to others automatically.

IMPROVED The domain tool checks that your domain points at the instance before requesting a certificate, which avoids the Let’s Encrypt rate limit that follows repeated failed attempts.

IMPROVED AlmaLinux 10 with current patches, replacing AlmaLinux 9.

EGL Build 260629.1

29 June 2026

IMPROVED Latest AlmaLinux: latest AlmaLinux 9 with critical patches applied, delivering improved stability, security, and long-term support.

IMPROVED Hardened Security – Implemented additional security measures, including the latest CVE patches, to protect against emerging threats and vulnerabilities.

IMPROVED Comprehensive Package Updates: All system packages and dependencies have been updated to their latest stable versions, ensuring compatibility, reliability, and security.

EGL Build 260421.1

21 April 2026

IMPROVED Latest AlmaLinux 9 – Now running on the latest AlmaLinux 9 with critical patches applied, delivering improved stability, security, and long-term support.

IMPROVED Latest Matomo: latest stable version, ensuring compatibility with new features, performance improvements, and security enhancements.

IMPROVED Hardened Security – Implemented additional security measures, including the latest CVE patches, to protect against emerging threats and vulnerabilities.

IMPROVED Performance Optimizations – Fine-tuned system configurations to enhance speed, responsiveness, and resource efficiency.

IMPROVED Comprehensive Package Updates – All system packages and dependencies have been updated to their latest stable versions, ensuring compatibility, reliability, and security.

EGL Build 251023.1

23 October 2025

IMPROVED Latest AlmaLinux 9 – Now running on the latest AlmaLinux 9 with critical patches applied, delivering improved stability, security, and long-term support.

IMPROVED Upgraded to Latest Matomo: Seamlessly upgraded to the latest stable version, ensuring compatibility with new features, performance improvements, and security enhancements.

IMPROVED Hardened Security – Implemented additional security measures, including the latest CVE patches, to protect against emerging threats and vulnerabilities.

IMPROVED Performance Optimizations – Fine-tuned system configurations to enhance speed, responsiveness, and resource efficiency.

IMPROVED Comprehensive Package Updates – All system packages and dependencies have been updated to their latest stable versions, ensuring compatibility, reliability, and security.

EGL Build 250316.1

16 March 2025

IMPROVED System Updates: AlmaLinux has been upgraded to the latest version,

IMPROVED Package Updates: All packages have been updated to the most recent stable versions, ensuring improved compatibility and reliability.

IMPROVED Security Patch Updates: Addressed latest CVE reported risks to enhance security and mitigate potential vulnerabilities.

FIXED Bug Fixes: Resolved the virtual host issue and addressed several user-reported problems to enhance usability and stability.

EGL Build 231014.1

14 October 2023

IMPROVED Latest Alma Linux OS

IMPROVED Tighten security

FIXED Other minor issues

EGL Build 220825.1

25 August 2022

NEW AWS initial release.

NEW AWS ENA-support

EGL Build 241111.1

11 November 2024

NEW Hardened Matomo 5.0 initial release.

IMPROVED Latest Alma Linux OS

IMPROVED PHP 8.2

IMPROVED MariaDB 11.5

IMPROVED Tighten security

CONTENTS