Flyspray v1.0-rc3 Release Notes

Release Date: 2016-10-04 // over 7 years ago
  • Main changes since Flyspray 1.0 RC1

    • ๐Ÿš‘ security hotfix: deactivated fetch.php of dokuwiki syntax plugin due 2 reported security problems (probably all previous Flyspray versions)
    • bugfix: user with only modify_own_tasks wasn't able to update tasks due too strict form checks (v1.0-rc1 was affected)
    • ๐Ÿ”’ security improvement: use crypt() instead md5 as default config setting at installation
    • ๐Ÿ”’ security fix: added missing permission checks for RSS/Atom feeds
    • ๐Ÿ”’ security fix (3rd library): The .zip contains now ADOdb 5.20.7 .
    • ๐Ÿ”’ security fix (3rd library): The .zip for php5.6 with 3rd libraries included now contains guzzle in a fixed version after httpoxy . (The others below php5.6 were not affected, because only guzzle since 4.0 was affected by httpoxy vulnerability.)
    • ๐Ÿ›  bugfix: better settings possible combined with anonymous task creation feature
    • ๐Ÿ›  bugfix: dokuwiki: geshi syntax highlighting working (task description, comments, project and flyspray info boxes)
    • ๐Ÿ”‹ feature: language chinese traditional:taiwan/HongKong added