Cloudron Forum

[1.4.1] Update sftpgo to 2.7.1 Full Changelog SFTPD: Added support for OpenPubkey SSH, enabling tighter integration between OpenID Connect and SFTP. Enforced password validation rules also when applied through a group. Fixed an issue where JSON dumps containing command actions failed to load correctly at startup when loaded as initial data. Data Provider: Fixed lock handling issues during migrations that could affect MySQL when migrations are executed concurrently by multiple instances. Fixed a potential path traversal and permission bypass involving specially crafted paths. CVE-2026-30914. Fixed placeholder sanitization in group home directories and key prefixes. CVE-2026-30915. Unified path handling: Prior to this release, the backslash character (\) was treated differently depending on the host operating system: on Linux, it was considered a standard character within a file or directory name, while on Windows, it acted as a path separator. We have now unified path handling across all platforms. Moving forward, both forward slashes (/) and backslashes (\) are strictly evaluated as path separators, independently of the underlying OS.

[4.6.1] Update PeerTube to 8.1.2 Full Changelog Fix broken thumbnails on account page Fix broken initial channel import Fix broken root password generation

[1.1.2] Update opodsync to 0.5.2 Full Changelog Fix: error when addin a new subscription (GH-86)

[1.8.0] Update comentario to 3.17.0 Full Changelog Add custom moderator name feature (#​222) - 66d2bcc, 753451c, 61cc240, ff9e89f, 400f7e5, 8425ce6, 4bab9e2, c1a4ec3, 467bcc0 Add support for PostgreSQL 18 (#​224) - 84c93da Backend: fix resource leak in DecompressGzip() - 58cfbe7 Backend: fix Postgres restart loop with a non-public schema (#​225, !24) - 9137e53, 4476b1b I18n: add Portuguese messages (pt) by @​pt.cesar.monteiro - bbc7303 I18n: add Ukrainian translation (uk) by @​kleindberg - 3e7ca17 Go 1.26, update dependencies, modernise code - 33d3044, a4232a7, 4605e5c, cab77fb, 3b97e19, 58a1146, 53e905a, 8464344, 1e193e3, 0c1de70, 8c7cc53 Demo website: add predefined comments to Ukrainian page (also !30) - 724a0ad Demo website: fix comment and config statements - 2a3516d, 25e7a30

[1.32.0] Update calibre to 9.5.0 Full Changelog

[1.29.4] Update changedetection.io to 0.54.5 Full Changelog Restock - No need to extract the text because it's not used anyway by @​dgtlmoon in #​3951 Content fetching -Better detection of other encodings, Replace/upgrade broken UTF-8 , Ensure rest of retrieved content is UTF-8 for the app by @​dgtlmoon in #​3954 UI - Price amount is sometimes string or integer by @​dgtlmoon in #​3950 *CI - Bump the all group with 5 updates by @​dependabot[bot] in #​3955 Various memory and CPU improvements by @​dgtlmoon in #​3960 Add complete Spanish translation (es) by @​adriangc24 in #​3961 Create (POST) tag/group through API do not save processor_config_restock_diff values by @​dgtlmoon in #​3968 UI - Fixing Preview "GO" version button by @​dgtlmoon in #​3969 API - Invert changes_only flag for include_equal parameter by @​dgtlmoon in #​3976

[1.9.0] Update 2FAuth to 6.1.1 Full Changelog issue #​532 Unable to create new entries via the Advanced Form MR #​526 Chinese Traditional translation, thanks to @​olivertzeng MR #​527 Allow pasting on upload page to add QR codes easily, thanks to @​moritzuehlingo BLOCK_OPTAUTH_IMAGELINK_FETCHING: Enable or disable fetching of resources linked in the imagelink parameter of OTPauth URIs encoded in QR codes (doc). THROTTLE_API_DURING_IMPORT: Specific rate limite for API calls made by the Import feature to prevent 429 error during large import (doc, #​522). Mitigate blind SSRF by adding URL validation before imagelink resources are fetched (thx @​DenizParlak). This comes with the new BLOCK_OPTAUTH_IMAGELINK_FETCHING env var, which is set to true by default. Installation fails due to CVE-2025-45769 in transitive dependency firebase/php-jwt < 7.0.0 (via laravel/passport) (thx @​MickLesk) [issue #​509] manifest.json cannot be accessed through a reverse proxy [issue #​516] Local iconsPack is greyout - cant be selected for item [issue #​517] Typo: "recommanded" instead of "recommended"