CHANGELOG
4.1.10
Update Instructions
- Migration Patch:
- A migration script for the configuration file is available. Run the following command in the setup container with Docker if the environment variable
PHRASEANET_UPGRADE=1
is set:bin/setup system:upgrade
- A migration script for the configuration file is available. Run the following command in the setup container with Docker if the environment variable
Version Summary
-
Bump Phraseanet Base Image to 1.1.0:
- OS version updated.
- Bumped
Popeler
dependency . - Added missing dependency,
ufraw
.
-
Updated Components:
- RabbitMQ: Upgraded to version 3.8.34.
- Nginx: Updated to the latest stable release, 1.27.2.
-
Security Fixes:
- Fixed CSRF vulnerability in the userProfile endpoint.
- Addressed XSS injection vulnerability in the user profile.
- Corrected HTML injection in notification emails.
-
Other Updates:
- Updated translations.
Stack (Docker Compose and Helm)
- Phraseanet Base Image: Version bumped.
- RabbitMQ: Version bumped.
- Nginx: Version bumped.
- Helm Updates:
- Added
nodeSelector
property to all charts except for the DB pod. imagePullPolicy
can now be set fromvalues.yaml
.- Release details: Helm chart release 0.47.0
- Added
What's Changed
- PHRAS-3416 : fix string in admin create subdef by @aynsix in #4534
- PHRAS-3416 create subdefinition localisation by @nmaillat in #4537
- PHRAS-4094 Bump rabbitMQ version to 3.8.34 by @gjacobjn in #4546
- PHRAS-4090:Prod - expose-cli - publication - publication description is Nok by @aynsix in #4536
- Fix for phraseanet-saml-sp image build in Dockerfile by @gjacobjn in #4543
- PHRAS-4100 Php upload tmp directory by @nmaillat in #4553
- PHRAS-4079 Bump base image 1.1.0 by @moctardiouf in #4554
- PHRAS-3857 : Check CSRF token on account by @aynsix in #4556
- PHRAS-4103 Prod xss check by @aynsix in #4555
- PHRAS-4088: improving Job ack in workerRunningJob by @aynsix in #4535
- fix typo by @tacman in #4552
- PHRAS-4104 Nginx bump 1.27.2 by @nmaillat in #4557
- PHRAS-4101: Update Range for Subdefinition Image Sizes by @nmaillat in #4558
New Contributors
Full Changelog: 4.1.9...4.1.10