All Versions
9
Latest Version
Avg Release Cycle
141 days
Latest Release
1263 days ago

Changelog History

  • v1.0-rc9 Changes

    April 22, 2019

    ๐Ÿ”„ Changes:

    ๐Ÿ›  fix french language file which was broken in Flyspray 1.0-rc8

  • v1.0-rc8 Changes

    April 17, 2019

    Main Changes:

    • privacy: Recipients of same language of a notification email are now put into Bcc: field, not To: field.
      ๐Ÿ‘€ See 2135612
      ๐Ÿ‘€ (For small internal intimate teams/friends maybe cool to see who else receives a notification, but not public projects. Do a feature request for a config option if there is demand.)
    • ๐Ÿ”’ security fix: It was possible for a user with view history permission in one project to view history of other projects or global event history. (all previous versions affected)
    • ๐Ÿšš move task to other project now handles all cases (1.0-rc7 was quite strict to reveal possibe inconsistencies to the user, but incomplete to provide solutions)
    • mass operation can now be enabled in admin area. But no check for possible inconsistencies and no notifications will be sent for that operations!
    • โš  several php warnings are fixed (csv export, rss/atom)
    • โœ… minimum PHP5.4 (older PHP5.3 may work, but not tested anymore) - PHP7.3
  • v1.0-rc7 Changes

    July 16, 2018

    Main Changes:

    • PHP 7.2 compatible
    • ๐Ÿ‘ better password hashes using password_hash()
    • ๐Ÿ”ง also Google reCaptcha configurable
    • a new basic checks tab in admin area
    • more fields chooseable in admin editallusers view
    • last_login field in user table

    flyspray-1.0-rc7.tgz has all 3rd party libraries included.

  • v1.0-rc6 Changes

    October 04, 2017

    ๐Ÿš€ Security release

    ๐Ÿš€ Several security issues were reported and fixed with this release.

  • v1.0-rc4 Changes

    November 18, 2016

    ๐Ÿš€ security release

    • ๐Ÿ”’ security fix: XSS was possible on task link attachments and comment link attachments
    • ๐Ÿ”’ security fix: XSS was possible on task details and task comment when syntax_plugin='none'
  • v1.0-rc3 Changes

    October 04, 2016

    Main changes since Flyspray 1.0 RC1

    • ๐Ÿš‘ security hotfix: deactivated fetch.php of dokuwiki syntax plugin due 2 reported security problems (probably all previous Flyspray versions)
    • bugfix: user with only modify_own_tasks wasn't able to update tasks due too strict form checks (v1.0-rc1 was affected)
    • ๐Ÿ”’ security improvement: use crypt() instead md5 as default config setting at installation
    • ๐Ÿ”’ security fix: added missing permission checks for RSS/Atom feeds
    • ๐Ÿ”’ security fix (3rd library): The .zip contains now ADOdb 5.20.7 .
    • ๐Ÿ”’ security fix (3rd library): The .zip for php5.6 with 3rd libraries included now contains guzzle in a fixed version after httpoxy . (The others below php5.6 were not affected, because only guzzle since 4.0 was affected by httpoxy vulnerability.)
    • ๐Ÿ›  bugfix: better settings possible combined with anonymous task creation feature
    • ๐Ÿ›  bugfix: dokuwiki: geshi syntax highlighting working (task description, comments, project and flyspray info boxes)
    • ๐Ÿ”‹ feature: language chinese traditional:taiwan/HongKong added
  • v1.0-rc2

    October 04, 2016
  • v1.0-rc1 Changes

    April 10, 2016

    ๐Ÿ”„ Changes since Flyspray 1.0 RC:

    • ๐Ÿ›  bugfix: It was possible that quickedit checked user permissions against the default project, not the project of the task.
    • ๐Ÿ›  bugfix: accept priority with id 6 again
    • ๐Ÿ›  bugfix: 0 effort entries in effort tracking are now ignored and not shown as "in progress"
    • ๐Ÿ”‹ feature: mysqli db connect to a local socket, workaround a missing adodb driver functionality.
    • ๐Ÿ›  bugfix: preinstall check for exif extension
    • โœจ enhancement: updated finnish translation
  • v1.0-rc Changes

    March 23, 2016

    ๐Ÿ”„ Changes since Flyspray 1.0 Beta2: