This release contains several bug fixes, improvements and security-related changes since Admidio 5.0.15.
Security
Security is an important part of this release. Several access control issues have been fixed to ensure that users can only access or modify data for which they have the required permissions.
-
Improved access control for PDF landscape exports
Fixed an authorization issue where PDF landscape exports were not checked properly against the user's permissions. -
Improved access control in the Inventory module
Fixed several issues that could allow users to access inventory data even when the Inventory module was disabled or the required permissions were missing. -
Improved authorization checks in the Forum module
Fixed an issue that could allow authenticated users to modify forum topics created by other users. -
Improved access control for list exports
Fixed an authorization bypass where the PDF landscape export mode was not properly included in the permission checks for list exports. -
Improved access control for Weblinks RSS feeds
Fixed an issue where links from role-restricted categories could be exposed through the RSS feed to unauthenticated users.
You can find more information here:
https://github.com/Admidio/admidio/security
Bug Fixes
- Fixed an error when reloading current role memberships on profiles without active roles.
- Fixed the global contacts search when date or timestamp columns are used with databases configured with
utf8mb4. - Fixed an issue where the email field was not displayed correctly during registration.
- Fixed errors that could occur when updating older Admidio installations from versions 4.1 or 4.3 to Admidio 5.0.
- Fixed various other issues reported by the community.
Improvements
- Added support for additional modern media, image and archive formats, including
m4a,m4v,mkv,flac,ogg,opus,7z,rar,webp,heic,heifandsvg. - Added chunked file uploads to improve the reliability of large file uploads, especially on servers with restrictive PHP or proxy upload limits.
- Improved upload handling to ensure database entries, notifications and photo processing are only triggered after a complete file has been uploaded.
- Updated several third-party libraries.
- Improved the mobile menu layout and accessibility.
Further Information
We recommend you to read our announcements for version 5 if you have not done so already:
https://www.admidio.org/dokuwiki/doku.php?id=en:2.0:announcement_v5
A full list of all new features and bug fixes can be found in our issue tracker for version 5.0 and version 5.0.16.
Full Changelog:
https://github.com/Admidio/admidio/compare/v5.0.15..v5.0.16
If you are new to Admidio and want to install it on your website, the following wiki page could help you:
https://www.admidio.org/dokuwiki/doku.php?id=en:2.0:installation
The following wiki page may be interesting when updating an existing installation:
https://www.admidio.org/dokuwiki/doku.php?id=en:2.0:update