Jirafeau - Package Updates

[girish]

[1.6.0]

• Update base image to 4.0.0

[girish]

[1.6.1]

• Better config.php

[girish]

[1.7.0]

• Update base image to 4.2.0

[Package Updates]

[1.8.0]

• Update Jirafeau to 4.6.0
• Full changelog
• New configuration options for allowing to require, check or generate file download passwords
• Re-implemented server side encryption using PHP's Sodium extension (the formerly used mcrypt extension is deprecated)
• Keep and show basic download stats
• Removed Lighttpd's mod_usertrack from Docker config
• Added <meta name="viewport" to template header to support responsive themes

[Package Updates]

[1.8.1]

• Update Jirafeau to 4.6.1
• Full Changelog
• Removed the download button and the corresponding link for encrypted files from the admin interface
• Fixed an issue with sending the wrong filesize after decrypting an encrypted file
• Fixed the possibility to bypass the check for CVE-2022-30110 (prevent preview of SVG images) by sending a manipulated HTTP request with a MIME type like "image/svg+XML".
• We now provide Docker images for AMD64 and ARM64 systems
• Lots of code refactoring and cleanup
• Few more little fixes
• Typo and spelling mistakes

[Package Updates]

[1.9.0]

• symlink custom tos to /app/data/tos.local.txt

[Package Updates]

[1.9.1]

• Update Jirafeau to 4.6.2
• Full Changelog
• Allow to configure the language and the availabilities for files for a Docker container (issue #​20)
• Added an example docker-compose.yaml file for configuring the Docker container
• Fixed an error occuring on some systems while building the Docker image (issue #​24)
• Script upload was broken due to a missing return statement (issue #​23)
• Upgrade from 4.6.1: in-place upgrade

[Package Updates]

[1.10.0]

• Update base image to 5.0.0

[Package Updates]

[1.11.0]

• add checklist

[Package Updates]

[1.11.1]

• Update Jirafeau to 4.6.3
• Full Changelog
• Fixed the possibility to bypass the checks for CVE-2022-30110 and CVE-2024-12326 (prevent preview of SVG images and other critical files) by sending a manipulated HTTP request with a MIME type like "image/png,text/html". When doing the preview, the MIME type "text/html" takes precedence and you can execute for example JavaScript code.
• Compare password hashes using hash_equals()