X-Git-Url: https://git.p6c8.net/jirafeau.git/blobdiff_plain/1f2b94fb15bbb1a4d4da0a2890aec3125abb32c3..HEAD:/CHANGELOG.md?ds=sidebyside diff --git a/CHANGELOG.md b/CHANGELOG.md index 892d172..13564df 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,7 +12,21 @@ 5. Follow the installation wizard, it should propose you the same data folder or even update automatically 6. Check your `/lib/config.local.php` and compare it with the `/lib/config.original.php` to see if new configuration items are available. If a new item is missing in your `config.local.php`, this may trigger some errors as Jirafeau may expect to have them. -## Version 4.6.0 (not yet released) +## Version 4.6.1 + +- Removed the download button and the corresponding link for encrypted files from the admin interface +- Fixed an issue with sending the wrong filesize after decrypting an encrypted file +- Fixed the possibility to bypass the check for CVE-2022-30110 (prevent preview of SVG images) by sending a manipulated HTTP request with a MIME type like "image/svg+XML". +- We now provide Docker images for AMD64 and ARM64 systems +- Lots of code refactoring and cleanup +- Few more little fixes +- Typo and spelling mistakes +- Upgrade from 4.6.0: in-place upgrade + +New configuration items: +- `one_time_download_preselected` for preselecting the checkbox for deleting the file after the first download + +## Version 4.6.0 - New configuration options for allowing to require, check or generate file download passwords - Re-implemented server side encryption using PHP's `Sodium` extension (the formerly used `mcrypt` extension is deprecated) @@ -22,6 +36,7 @@ - Removed usage of deprecated `strftime()` function - Few more little fixes - Typo and spelling mistakes +- Upgrade from 4.5.0: in-place upgrade New configuration items: - `download_password_requirement`, `download_password_gen_len`, `download_password_gen_chars`, `download_password_policy` and `download_password_policy_regex` for configuring file download passwords