Releases: linuxserver/docker-bookstack
v25.12.2-ls241
6d24518
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.12.1-ls240...v25.12.2-ls241
Remote Changes:
Links
Full List of Changes
This release contains the following fixes and changes:
- Updated translations with latest Crowdin changes. (#5970)
- Updated PHP dependency versions.
v25.12.1-ls240
c36bdfb
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.12.1-ls239...v25.12.1-ls240
Remote Changes:
Security Release
BookStack v25.12.1 has been released.
This is a security release which adds limits to search operations, and adds size checks to ZIP import files before they are extracted.
These changes help prevent potential abuse to host disk space usage and/or service availability.
We recommended to update your instance if untrusted users have ZIP import permissions, or if untrusted users can perform searches.
Thanks to Jeong Woo Lee (@eclipse07077-ljw) and Gabriel Rodrigues (aka TEXUGO) for reporting these vulnerabilities.
Full List of Changes
v25.12.1-ls239
CI Report:
N/A
LinuxServer Changes:
New Contributors
Full Changelog: v25.12.1-ls238...v25.12.1-ls239
Remote Changes:
Security Release
BookStack v25.12.1 has been released.
This is a security release which adds limits to search operations, and adds size checks to ZIP import files before they are extracted.
These changes help prevent potential abuse to host disk space usage and/or service availability.
We recommended to update your instance if untrusted users have ZIP import permissions, or if untrusted users can perform searches.
Thanks to Jeong Woo Lee (@eclipse07077-ljw) and Gabriel Rodrigues (aka TEXUGO) for reporting these vulnerabilities.
Full List of Changes
Contributors
Assets 2
v25.12.1-ls238
c5d0fd7
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.12-ls237...v25.12.1-ls238
Remote Changes:
Security Release
BookStack v25.12.1 has been released.
This is a security release which adds limits to search operations, and adds size checks to ZIP import files before they are extracted.
These changes help prevent potential abuse to host disk space usage and/or service availability.
We recommended to update your instance if untrusted users have ZIP import permissions, or if untrusted users can perform searches.
Thanks to Jeong Woo Lee (@eclipse07077-ljw) and Gabriel Rodrigues (aka TEXUGO) for reporting these vulnerabilities.
Full List of Changes
v25.12-ls237
f68b027
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.6-ls236...v25.12-ls237
Remote Changes:
Links
Full List of Changes
- Added user mentions for comments. (#5944, #560)
- Added slug history tracking system. (#5913, #5411)
- Added initial developer API for the new WYSIWYG editor. (#5928, #5763)
- Added internal reference handling on content copying. (#5917, #3239)
- Added settings to control the number of books/shelves that will be displayed per page. Thanks to @Xenoamor. (#5606, #2343)
- Updated translations with latest Crowdin changes. (#5933)
- Updated new WYSIWYG editor with a range of fixes. (#5939)
- Updated BookStack system CLI to v0.4. (#5956)
- Updated CSS dark/light mode handling so all CSS variables exist by default. (#5923)
- Updated "Microsoft URL Rewrite Module for IIS" download link. Thanks to @gerundt. (#5952)
- Updated image thumbnail generation to more reliably log issues on error. (#5869)
- Updated database to add index to views table to make view-based queries more efficient. (#5948)
- Updated application database requirements. (#5882)
- Fixed search pagination not using APP_URL value, and breaking for sub-path usage. (#5951)
- Fixed search pagination overflowing view on smaller screen sizes. (#5920)
v25.11.6-ls236
6bc3180
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.6-ls235...v25.11.6-ls236
Remote Changes:
Security Release
BookStack v25.11.6 has been released.
This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.
It's strongly advised to update if you're using SAML authentication for BookStack.
Full List of Changes
- Updated application PHP dependencies.
v25.11.6-ls235
3dfc0bd
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.6-ls234...v25.11.6-ls235
Remote Changes:
Security Release
BookStack v25.11.6 has been released.
This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.
It's strongly advised to update if you're using SAML authentication for BookStack.
Full List of Changes
- Updated application PHP dependencies.
v25.11.6-ls234
08370f1
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.5-ls233...v25.11.6-ls234
Remote Changes:
Security Release
BookStack v25.11.6 has been released.
This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.
It's strongly advised to update if you're using SAML authentication for BookStack.
Full List of Changes
- Updated application PHP dependencies.
v25.11.5-ls233
dd118d1
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.5-ls232...v25.11.5-ls233
Remote Changes:
Links
Full List of Changes
This release contains the following fixes and changes:
v25.11.5-ls232
18bdc16
LinuxServer-CI
LinuxServer.io CI
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.4-ls231...v25.11.5-ls232
Remote Changes:
Links
Full List of Changes
This release contains the following fixes and changes: