Skip to content

Releases: linuxserver/docker-bookstack

v25.12.1-ls238

30 Dec 17:48
c5d0fd7

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.12-ls237...v25.12.1-ls238

Remote Changes:

Security Release

BookStack v25.12.1 has been released.

This is a security release which adds limits to search operations, and adds size checks to ZIP import files before they are extracted.
These changes help prevent potential abuse to host disk space usage and/or service availability.

We recommended to update your instance if untrusted users have ZIP import permissions, or if untrusted users can perform searches.

Thanks to Jeong Woo Lee (@eclipse07077-ljw) and Gabriel Rodrigues (aka TEXUGO) for reporting these vulnerabilities.

Full List of Changes

  • Updated application PHP dependencies.
  • Add some additional resource-based limits. (#5968)
  • Updated translations with latest Crowdin changes. (#5962)

v25.12-ls237

24 Dec 13:15
f68b027

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.6-ls236...v25.12-ls237

Remote Changes:

Links

Full List of Changes

  • Added user mentions for comments. (#5944, #560)
  • Added slug history tracking system. (#5913, #5411)
  • Added initial developer API for the new WYSIWYG editor. (#5928, #5763)
  • Added internal reference handling on content copying. (#5917, #3239)
  • Added settings to control the number of books/shelves that will be displayed per page. Thanks to @Xenoamor. (#5606, #2343)
  • Updated translations with latest Crowdin changes. (#5933)
  • Updated new WYSIWYG editor with a range of fixes. (#5939)
  • Updated BookStack system CLI to v0.4. (#5956)
  • Updated CSS dark/light mode handling so all CSS variables exist by default. (#5923)
  • Updated "Microsoft URL Rewrite Module for IIS" download link. Thanks to @gerundt. (#5952)
  • Updated image thumbnail generation to more reliably log issues on error. (#5869)
  • Updated database to add index to views table to make view-based queries more efficient. (#5948)
  • Updated application database requirements. (#5882)
  • Fixed search pagination not using APP_URL value, and breaking for sub-path usage. (#5951)
  • Fixed search pagination overflowing view on smaller screen sizes. (#5920)

v25.11.6-ls236

22 Dec 18:57
6bc3180

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.6-ls235...v25.11.6-ls236

Remote Changes:

Security Release

BookStack v25.11.6 has been released.

This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.

It's strongly advised to update if you're using SAML authentication for BookStack.

Full List of Changes

  • Updated application PHP dependencies.

v25.11.6-ls235

15 Dec 18:44
3dfc0bd

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.6-ls234...v25.11.6-ls235

Remote Changes:

Security Release

BookStack v25.11.6 has been released.

This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.

It's strongly advised to update if you're using SAML authentication for BookStack.

Full List of Changes

  • Updated application PHP dependencies.

v25.11.6-ls234

09 Dec 21:44
08370f1

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.5-ls233...v25.11.6-ls234

Remote Changes:

Security Release

BookStack v25.11.6 has been released.

This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.

It's strongly advised to update if you're using SAML authentication for BookStack.

Full List of Changes

  • Updated application PHP dependencies.

v25.11.5-ls233

08 Dec 18:43
dd118d1

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.5-ls232...v25.11.5-ls233

Remote Changes:

Links

Full List of Changes

This release contains the following fixes and changes:

  • Updated OIDC state handling to prevent other requests causing the process to fail, which was occurring in Chromium based browsers. (#5929)
  • Updated session history handling to prevent redirects to common asset locations. (#5925)
  • Updated PHP dependency versions.

v25.11.5-ls232

03 Dec 15:49
18bdc16

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.4-ls231...v25.11.5-ls232

Remote Changes:

Links

Full List of Changes

This release contains the following fixes and changes:

  • Updated OIDC state handling to prevent other requests causing the process to fail, which was occurring in Chromium based browsers. (#5929)
  • Updated session history handling to prevent redirects to common asset locations. (#5925)
  • Updated PHP dependency versions.

v25.11.4-ls231

01 Dec 18:45
0812ae0

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.4-ls230...v25.11.4-ls231

Remote Changes:

Note: This was originally accidentally published as v24.11.4, so this is essential a re-publish with the correct version.
The wrong version number commit/history has been retained though to prevent any breakages for git-managed environments.

Links

Full List of Changes

This release contains the following fixes and changes:

  • Fixed error thrown when attempting to send new comment notifications. (#5918)
  • Updated PHP dependency versions.

v25.11.4-ls230

25 Nov 22:45
bf431f8

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.3-ls229...v25.11.4-ls230

Remote Changes:

Note: This was originally accidentally published as v24.11.4, so this is essential a re-publish with the correct version.
The wrong version number commit/history has been retained though to prevent any breakages for git-managed environments.

Links

Full List of Changes

This release contains the following fixes and changes:

  • Fixed error thrown when attempting to send new comment notifications. (#5918)
  • Updated PHP dependency versions.

v25.11.3-ls229

21 Nov 15:35
08a396d

Choose a tag to compare

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.2-ls228...v25.11.3-ls229

Remote Changes:

Links

Full List of Changes

This release contains the following fixes and changes:

  • Fixed overly-strict image access permission changes in v25.11.2 which could block images when a secure storage option was used alongside public access. (#5906, #5909)
  • Updated app PHP dependencies to latest versions.