Releases: linuxserver/docker-bookstack
v25.12.1-ls238
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.12-ls237...v25.12.1-ls238
Remote Changes:
Security Release
BookStack v25.12.1 has been released.
This is a security release which adds limits to search operations, and adds size checks to ZIP import files before they are extracted.
These changes help prevent potential abuse to host disk space usage and/or service availability.
We recommended to update your instance if untrusted users have ZIP import permissions, or if untrusted users can perform searches.
Thanks to Jeong Woo Lee (@eclipse07077-ljw) and Gabriel Rodrigues (aka TEXUGO) for reporting these vulnerabilities.
Full List of Changes
v25.12-ls237
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.6-ls236...v25.12-ls237
Remote Changes:
Links
Full List of Changes
- Added user mentions for comments. (#5944, #560)
- Added slug history tracking system. (#5913, #5411)
- Added initial developer API for the new WYSIWYG editor. (#5928, #5763)
- Added internal reference handling on content copying. (#5917, #3239)
- Added settings to control the number of books/shelves that will be displayed per page. Thanks to @Xenoamor. (#5606, #2343)
- Updated translations with latest Crowdin changes. (#5933)
- Updated new WYSIWYG editor with a range of fixes. (#5939)
- Updated BookStack system CLI to v0.4. (#5956)
- Updated CSS dark/light mode handling so all CSS variables exist by default. (#5923)
- Updated "Microsoft URL Rewrite Module for IIS" download link. Thanks to @gerundt. (#5952)
- Updated image thumbnail generation to more reliably log issues on error. (#5869)
- Updated database to add index to views table to make view-based queries more efficient. (#5948)
- Updated application database requirements. (#5882)
- Fixed search pagination not using APP_URL value, and breaking for sub-path usage. (#5951)
- Fixed search pagination overflowing view on smaller screen sizes. (#5920)
v25.11.6-ls236
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.6-ls235...v25.11.6-ls236
Remote Changes:
Security Release
BookStack v25.11.6 has been released.
This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.
It's strongly advised to update if you're using SAML authentication for BookStack.
Full List of Changes
- Updated application PHP dependencies.
v25.11.6-ls235
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.6-ls234...v25.11.6-ls235
Remote Changes:
Security Release
BookStack v25.11.6 has been released.
This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.
It's strongly advised to update if you're using SAML authentication for BookStack.
Full List of Changes
- Updated application PHP dependencies.
v25.11.6-ls234
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.5-ls233...v25.11.6-ls234
Remote Changes:
Security Release
BookStack v25.11.6 has been released.
This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.
It's strongly advised to update if you're using SAML authentication for BookStack.
Full List of Changes
- Updated application PHP dependencies.
v25.11.5-ls233
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.5-ls232...v25.11.5-ls233
Remote Changes:
Links
Full List of Changes
This release contains the following fixes and changes:
v25.11.5-ls232
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.4-ls231...v25.11.5-ls232
Remote Changes:
Links
Full List of Changes
This release contains the following fixes and changes:
v25.11.4-ls231
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.4-ls230...v25.11.4-ls231
Remote Changes:
Note: This was originally accidentally published as v24.11.4, so this is essential a re-publish with the correct version.
The wrong version number commit/history has been retained though to prevent any breakages for git-managed environments.
Links
Full List of Changes
This release contains the following fixes and changes:
- Fixed error thrown when attempting to send new comment notifications. (#5918)
- Updated PHP dependency versions.
v25.11.4-ls230
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.3-ls229...v25.11.4-ls230
Remote Changes:
Note: This was originally accidentally published as v24.11.4, so this is essential a re-publish with the correct version.
The wrong version number commit/history has been retained though to prevent any breakages for git-managed environments.
Links
Full List of Changes
This release contains the following fixes and changes:
- Fixed error thrown when attempting to send new comment notifications. (#5918)
- Updated PHP dependency versions.
v25.11.3-ls229
CI Report:
N/A
LinuxServer Changes:
Full Changelog: v25.11.2-ls228...v25.11.3-ls229
Remote Changes:
Links
Full List of Changes
This release contains the following fixes and changes: