This release contains several bug fixes, improvements and security-related changes since Admidio 5.0.14.
Security
Security is an important part of this release. Security-related issues are highlighted separately so that administrators can quickly identify the relevant changes.
- [Security] Redirect not protected against invalid URL
Improved the protection of redirects to prevent invalid URLs from being used. - [Security] Objects of other organizations could be read
Fixed an access control issue that could allow objects belonging to other organizations to be read. - [Security] Output of database fields not checked properly against HTML content
Improved the validation and output handling of database fields to prevent HTML content from being processed incorrectly.
You can find more information here:
https://github.com/Admidio/admidio/security
Bug Fixes
- Fixed an issue with system notifications after deleting an email text.
- Fixed an issue in the Messages module when creating or editing messages.
- Fixed an error in
messages_write.php. - Fixed incorrect file extensions when downloading iCal files with Chrome and Safari.
- Fixed several issues in the Documents & Files module.
- Improved the handling of uploaded and unmanaged files.
- Fixed various other issues reported by the community.
Improvements
- Added support for additional OpenDocument file types.
- Improved compatibility when downloading calendar files with different browsers.
- Improved the reliability of system notifications and message handling.
Further Information
We recommend you to read our announcements for version 5 if you have not done so already.
A full list of all new features and bug fixes can be found in our issue tracker for version 5.0 and version 5.0.15.
Full Changelog:
https://github.com/Admidio/admidio/compare/v5.0.14..v5.0.15
If you are new to Admidio and want to install it on your website, the following wiki page could help you: Install Admidio
The following wiki page may be interesting when updating an existing installation: Update Admidio