CI Report:
N/A
LinuxServer Changes:
Full Changelog: 2.69.0-ls208...2.70.0-ls209
Remote Changes:
Compatible with PHP 8.2 to 8.5
Features
- Password strength configuration (#6242)
- CSS classes for customization (working contract screen) (#6240)
- Translations update from Hosted Weblate (#6235) (#6253)
🚨 Security
- Prevent internal preferences from being updated via API - thanks @sharma19d (#6240)
- Make sure that remembered users cannot skip the password-change wizard - thanks @sharma19d (#6240)
- Update security-signature on password-reset and end all active sessions - thanks @Tan-JunWei (#6240)
- Added EnvVarProcessor to parse TRUSTED_HOSTS - thanks @dylanzonix (#6246)
- Only the logged-in user can activate 2fa - thanks @AzureADTrent (#6240)
You can read more about all security reports here or grab this RSS feed to get notified about new published advisories.
Involved in this release: @kevinpapst, @AgenteGabrielofc, alhyei6si, Anastasija FG, Andrei Stepanov, @arifpedia, @aspopovic, Michal Várady, @oersen,@Ph1l0s64, @Watchman89