v25.11.6-ls235

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.6-ls234...v25.11.6-ls235

Remote Changes:

Security Release

• Update Instructions
• Update details on blog

BookStack v25.11.6 has been released.

This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.

It's strongly advised to update if you're using SAML authentication for BookStack.

Full List of Changes

• Updated application PHP dependencies.

v25.11.6-ls234

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.5-ls233...v25.11.6-ls234

Remote Changes:

Security Release

• Update Instructions
• Update details on blog

BookStack v25.11.6 has been released.

This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.

It's strongly advised to update if you're using SAML authentication for BookStack.

Full List of Changes

• Updated application PHP dependencies.

v25.11.5-ls233

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.5-ls232...v25.11.5-ls233

Remote Changes:

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Updated OIDC state handling to prevent other requests causing the process to fail, which was occurring in Chromium based browsers. (#5929)
• Updated session history handling to prevent redirects to common asset locations. (#5925)
• Updated PHP dependency versions.

v25.11.5-ls232

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.4-ls231...v25.11.5-ls232

Remote Changes:

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Updated OIDC state handling to prevent other requests causing the process to fail, which was occurring in Chromium based browsers. (#5929)
• Updated session history handling to prevent redirects to common asset locations. (#5925)
• Updated PHP dependency versions.

v25.11.4-ls231

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.4-ls230...v25.11.4-ls231

Remote Changes:

Note: This was originally accidentally published as v24.11.4, so this is essential a re-publish with the correct version.
The wrong version number commit/history has been retained though to prevent any breakages for git-managed environments.

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Fixed error thrown when attempting to send new comment notifications. (#5918)
• Updated PHP dependency versions.

v25.11.4-ls230

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.3-ls229...v25.11.4-ls230

Remote Changes:

Note: This was originally accidentally published as v24.11.4, so this is essential a re-publish with the correct version.
The wrong version number commit/history has been retained though to prevent any breakages for git-managed environments.

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Fixed error thrown when attempting to send new comment notifications. (#5918)
• Updated PHP dependency versions.

v25.11.3-ls229

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.2-ls228...v25.11.3-ls229

Remote Changes:

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Fixed overly-strict image access permission changes in v25.11.2 which could block images when a secure storage option was used alongside public access. (#5906, #5909)
• Updated app PHP dependencies to latest versions.

v25.11.2-ls228

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11.1-ls227...v25.11.2-ls228

Remote Changes:

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Fixed image permission checking in ZIP exports to prevent error and to align with UI access. (#5899, #5885)
• Updated translations with latest Crowdin changes. (#5887)
• Updated test environment refresh database command to set env timezone option to ensure test database is consistent. (#5881)
• Updated app PHP dependencies to latest versions.

v25.11.1-ls227

CI Report:

N/A

LinuxServer Changes:

Full Changelog: v25.11-ls226...v25.11.1-ls227

Remote Changes:

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Fixes database queries causing errors with versions of MySQL <= 5.7. (#5877)

v25.11.1-ls226

CI Report:

N/A

LinuxServer Changes:

No changes

Remote Changes:

Links

• Update instructions

Full List of Changes

This release contains the following fixes and changes:

• Fixes database queries causing errors with versions of MySQL <= 5.7. (#5877)