Changes in 5.0.3

Summary

• Bugfix - Update the admin user role assignment to enforce the config: #8918
• Bugfix - Crash when processing crafted TIFF files: #8981
• Bugfix - Update reva to v2.19.5: #9011
• Bugfix - Fix infected file handling: #9011

Details

• Bugfix - Update the admin user role assignment to enforce the config: #8918

  The admin user role assigment was not updated after the first assignment. We now
  read the assigned role during init and update the admin user ID accordingly if
  the role is not assigned. This is especially needed when the OCIS_ADMIN_USER_ID
  is set after the autoprovisioning of the admin user when it originates from an
  external Identity Provider.

  #8918
  #8897

• Bugfix - Crash when processing crafted TIFF files: #8981

  Fix for a vulnerability with low severity in disintegration/imaging.

  #8981
  GHSA-q7pp-wcgr-pffx

• Bugfix - Update reva to v2.19.5: #9011

  We updated reva to v2.19.5

  • Bugfix cs3org/reva#4654: Write blob based on session id
  • Bugfix cs3org/reva#4666: Fix uploading via a public link
  • Bugfix cs3org/reva#4665: Fix creating documents in nested folders of public shares
  • Enhancement cs3org/reva#4655: Bump mockery to v2.40.2
  • Enhancement cs3org/reva#4664: Add ScanData to Uploadsession

  #9011

• Bugfix - Fix infected file handling: #9011

  Reworks virus handling. Shows scandate and outcome on ocis storage-users uploads
  sessions. Avoids retrying infected files on ocis postprocessing restart.

  #9011