Pydio 6.0.7 - Security Update
Pydio 6.0.7 is a Security Update linked to vulnerabilities discovered by Lane Thames. It also fixes various small bugs.
Upgrade is straightforward and recommended, either in-app (archive deployments) or via Linux repositories (apt-get / yum).
Contributors: Cdujeu, Lane Thames, C12simple.
- SMB Auth: include domain name to user name (details)
- Get list of repository automatically (details)
- Massive refactoring of ElasticSearch plugin. Keyword search and indexed fields is working. (details)
- AuthService test userExist and create new (details)
- Add new parameter in ShareCenter to force password on public links. (details)
- InfoPanel: catch modifier evaluation error - CSS: hack transparent backgrounds for IE8 using \9 symbol. (details)
- Correct smb path string (details)
- ShareCenter : fix link pointing to a non-existing repository (details)
- ShareCenter.js: forgotten console calls (details)
- ShareCenter: Catch exceptions when forwarding changes, otherwise it stops the loop. (details)
- AjxpUtils::convertBytes : handle comma - Ajxp_VarsFilter::filter : pass an object or an id as resolve user (details)
- Major update of ElasticSearch implementation / Refactor some method to common parent with Lucene. (details)
- Check userExist to create new user for new sharing (details)
- Add a new dependency type phpExtension to avoid loading plugin that have a strong dependency to one or more php extensions. (details)
- Remove (beta) from sync clients buttons (details)
- ShareCenter: Fix "Preview" checkbox being automagically rechecked. Check template is not ajxp_unique_dl. (details)
- Start refactoring major JS resources. Split into subfolders. (details)
- Display admin Search Results with USER_DISPLAY_NAME (details)
- webdav error on smb workspace (details)
- Shared user watch is not correctly removed when user is removed from "Share with..." list. (details)
- Improve sanitization in Mysql driver and locally in XHRUploader. (details)
- Limit API connection "Login" logs to one per hour, otherwise it fills the log table, and makes the analytics quite slow. (details)
- Better commands sanitization to limit admin rights. (details)
- Fix text logger: was broken due to the clone call on object: refresh the fileHandle resource on clone. (details)
- Fix group listing for shared users when inside a group (cherry picked from commit a9fdc8c) (details)
- Ability to use multiple secure_token in one session, to avoid force reload on new tab. Notify existing windows with <require_registry_reload>. (details)
- IE8 Fixes - Fix #899 : remove tooltip when refreshing templates. (details)
- Make Etherpad more simple: support only .pad extensions, disable hideExtension() hook. (details)
- Refix c0205642045e943c086eb054f3947d5311d9997e : case is different if group listing is allowed on all groups or sub groups only. (details)
- Pass AJXP_VALUE_CLEAR as metadata value to force clearing key after array_merge() (details)
- Fix un-removed notification by checking ACL when listing the watches and updating metadata accordingly. (details)
- Fix Zip options tweaking, by properly separating zipBrowsingEnabled vs. zipCreationEnabled. (details)
- Use Dibi syntax for cross-db limit (details)
- Fix Jumploader not correctly sending node.change event (thus missing indexation) (details)
- Fix PLUploader : new way to get secure_token (details)