Jirafeau - Package Updates
-
[1.5.0]
- Update Jirafeau to 4.5.0
- Full changelog
- Even more new translation, thanks a lot to all contributors!
- Support for automatic dark theme
- Fixed wobling admin buttons (light and dark default themes)
- Disable file deduplication by default
- Fix side effects of setting too high values in php configuration for async upload
- Add support for X-Sendfile
- Retry on more type of possible errors
- Move docker image to PHP 8.1
- Print more error details in case of issue
- Few more little fixes
-
[1.8.0]
- Update Jirafeau to 4.6.0
- Full changelog
- New configuration options for allowing to require, check or generate file download passwords
- Re-implemented server side encryption using PHP's Sodium extension (the formerly used mcrypt extension is deprecated)
- Keep and show basic download stats
- Removed Lighttpd's mod_usertrack from Docker config
- Added
<meta name="viewport"to template header to support responsive themes
-
[1.8.1]
- Update Jirafeau to 4.6.1
- Full Changelog
- Removed the download button and the corresponding link for encrypted files from the admin interface
- Fixed an issue with sending the wrong filesize after decrypting an encrypted file
- Fixed the possibility to bypass the check for CVE-2022-30110 (prevent preview of SVG images) by sending a manipulated HTTP request with a MIME type like "image/svg+XML".
- We now provide Docker images for AMD64 and ARM64 systems
- Lots of code refactoring and cleanup
- Few more little fixes
- Typo and spelling mistakes
-
[1.9.0]
- symlink custom tos to
/app/data/tos.local.txt
- symlink custom tos to
-
[1.9.1]
- Update Jirafeau to 4.6.2
- Full Changelog
- Allow to configure the language and the availabilities for files for a Docker container (issue #​20)
- Added an example
docker-compose.yamlfile for configuring the Docker container - Fixed an error occuring on some systems while building the Docker image (issue #​24)
- Script upload was broken due to a missing
returnstatement (issue #​23) - Upgrade from 4.6.1: in-place upgrade
-
[1.10.0]
- Update base image to 5.0.0
-
[1.11.0]
- add checklist
-
[1.11.1]
- Update Jirafeau to 4.6.3
- Full Changelog
- Fixed the possibility to bypass the checks for CVE-2022-30110 and CVE-2024-12326 (prevent preview of SVG images and other critical files) by sending a manipulated HTTP request with a MIME type like "image/png,text/html". When doing the preview, the MIME type "text/html" takes precedence and you can execute for example JavaScript code.
- Compare password hashes using
hash_equals()
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login