PeerTube - Package Updates

[Package Updates]

[4.8.0]

• Update peertube-plugin-auth-openid-connect to 1.2.0
• Full Changelog

[Package Updates]

[4.8.1]

• Update peertube-plugin-auth-openid-connect to 2.0.0

[Package Updates]

[4.8.2]

• Update PeerTube to 8.2.3
• Full Changelog
• Fix P2P segment validator to correctly reject invalid chunks
• Forbid embed for videos with embed restrictions if the referer header is not set
• Redact OAuth tokens in debug logs
• Add max depth when fixing ActivityPub object
• Fix iOS mobile link for channels
• Fix input placeholder font size
• Correctly remove a private video linked to an abuse
• Do not validate search filters on "Enter" press in tag inputs
• Improve client notification if the backend returns a 502 HTTP error
• Fix various UI bugs/inconsistencies on RTL layout

[Package Updates]

[4.8.3]

• Update peertube-plugin-auth-openid-connect to 2.0.1
• Full Changelog

[Package Updates]

[4.8.4]

• Update PeerTube to 8.2.4
• Full Changelog

[Package Updates]

[4.9.0]

• Update PeerTube to 8.3.0
• Full Changelog
• Comment API change: GET /api/v1/videos/{id}/comment-threads/{threadId} no longer returns the full comment tree
• PeerTube requires PostgreSQL >= 14
• Prevent a moderator to change user role. Thanks to Infinit3i for reporting it
• Add ability to subscribe to a remote blocklist to automatically mute/unmute accounts and servers
• Add ability to subscribe to a remote watched words list, at both the platform and account level
• Admins can configure automatic tag policies to automatically block videos with a specific label
• Add ability for moderators to set an internal note on blocked videos
• Send an email notification on account login from a new device #7737
• Fix juddery video with variable fps input
• Fix broken byte range request support for video download endpoints when throttling is enabled

[Package Updates]

[4.9.1]

• Update PeerTube to 8.3.1
• Full Changelog
• This release addresses vulnerabilities ranging from medium to critical severity affecting PeerTube. In a week, this changelog will be updated to disclose the vulnerabilities.
• Force video encoding if there are rotation info
• Fix broken studio on only intro/outro/cut task
• Fix broken sorts/invalid sort checkers for channel syncs and ownership changes
• Fix downloading a download-protected video for admins
• Fix broken email title in some emails
• Fix broken notification window if the list contains a broken change ownership notification
• Fix table pagination after a search
• Include muted muted videos when admins/moderators display all videos of an account/channel

[Package Updates]

[4.9.2]

• Update peertube-plugin-auth-openid-connect to 2.1.1

[Package Updates]

[4.10.0]

• Update node-base | final to 24-20261021
• security: fix eMudhra cert compromise

[Package Updates]

[4.10.1]

• Update PeerTube to 8.3.2
• Full Changelog
• critical Upgrade vulnerable sharp (image processing dependency) that can lead to a RCE with a special crafted SVG file GHSA-wq5f-xc86-pv6w
• high Fix federation vulnerability where a remote attacker could exploit the redirection of cached remote objects to impersonate actors of another instance and modify its videos federated on an instance GHSA-5j4v-77rx-h5qg
• Update whisper-ctranslate2 package to fix installation on Python 3.12+
• Fix channel deletion cancel showing success message #7837
• Fix podcast feed podcast:medium value with audio enclosure preference
• Fix audio download with a webp thumbnail #7833
• Fix crash when remote video has no likes/dislikes collections #7836
• Limit resource usage when generating thumbnails