Announcements
This release contains several bug fixes, improvements and security-related changes since Admidio 5.0.16.
Security
Security is an important part of this release. Two issues have been fixed to improve the protection of server files and prevent unauthorized changes to event registrations.
- Improved security when sending eCards
Fixed a vulnerability that could allow authenticated users to access local server files through images embedded in eCard messages. - Improved validation of event registrations
Fixed an issue where members could register additional guests even when this option was disabled, potentially exceeding event capacity and preventing other members from registering.
You can find more information here:
https://github.com/Admidio/admidio/security
Bug Fixes
- Fixed an issue where dynamically loaded buttons did not correctly submit CSRF tokens, affecting actions such as creating new contacts.
- Fixed an issue where rejected chunked file uploads could be repeated indefinitely without displaying an error message.
- Fixed an issue where certain Docker environment variables, including ADMIDIO_LOGIN_FOR_UPDATE and ADMIDIO_PASSWORD_HASH_ALGORITHM, were not applied correctly.
- Fixed an issue that could cause duplicate entries to appear when adding participants to events.
- Corrected several typos and inconsistent translations in the German language files.
Improvements
- Updated MIME type definitions for various audio, video and Microsoft Office file formats to improve compatibility with browsers and downloads.
- Improved error handling for large file uploads to ensure that rejected uploads are stopped and appropriate error messages are displayed.
Further Information
We recommend you to read our announcements for version 5 if you have not done so already:
https://www.admidio.org/dokuwiki/doku.php?id=en:2.0:announcement_v5
A full list of all new features and bug fixes can be found in our [issue tracker for version 5.0.17](https://github.com/Admidio/admidio/issues?q=is%3Aclosed%20milestone%3A%22v5.0.17%22).
Full Changelog:
https://github.com/Admidio/admidio/compare/v5.0.16..v5.0.17
If you are new to Admidio and want to install it on your website, the following wiki page could help you:
https://www.admidio.org/dokuwiki/doku.php?id=en:2.0:installation
The following wiki page may be interesting when updating an existing installation:
https://www.admidio.org/dokuwiki/doku.php?id=en:2.0:update
Contributors
A big thank you to everyone who contributed to this release by reporting bugs, suggesting improvements, or providing fixes.
Special thanks to:
Your contributions help make Admidio better with every release. Thank you for your support!
This release contains several bug fixes, improvements and security-related changes since Admidio 5.0.14.
Security
Security is an important part of this release. Several access control issues have been fixed to ensure that users can only access or modify data for which they have the required permissions.
- Improved access control for PDF landscape exports
Fixed an authorization issue where PDF landscape exports were not checked properly against the user's permissions. - Improved access control in the Inventory module
Fixed several issues that could allow users to access inventory data even when the Inventory module was disabled or the required permissions were missing. - Improved authorization checks in the Forum module
Fixed an issue that could allow authenticated users to modify forum topics created by other users. - Improved access control for list exports
Fixed an authorization bypass where the PDF landscape export mode was not properly included in the permission checks for list exports. - Improved access control for Weblinks RSS feeds
Fixed an issue where links from role-restricted categories could be exposed through the RSS feed to unauthenticated users.
You can find more information here:
https://github.com/Admidio/admidio/security
Bug Fixes
- Fixed an error when reloading current role memberships on profiles without active roles.
- Fixed the global contacts search when date or timestamp columns are used with databases configured with utf8mb4.
- Fixed an issue where the email field was not displayed correctly during registration.
- Fixed errors that could occur when updating older Admidio installations from versions 4.1 or 4.3 to Admidio 5.0.
- Fixed various other issues reported by the community.
Improvements
- Added support for additional modern media, image and archive formats, including m4a, m4v, mkv, flac, ogg, opus, 7z, rar, webp, heic, heif and svg.
- Added chunked file uploads to improve the reliability of large file uploads, especially on servers with restrictive PHP or proxy upload limits.
- Improved upload handling to ensure database entries, notifications and photo processing are only triggered after a complete file has been uploaded.
- Updated several third-party libraries.
- Improved the mobile menu layout and accessibility.
Further Information
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update: Update Admidio
The Admidio Team
This release contains several bug fixes, improvements and security-related changes since Admidio 5.0.14.
Security
Security is an important part of this release. Security-related issues are highlighted separately so that administrators can quickly identify the relevant changes.
- Redirect not protected against invalid URL
Improved the protection of redirects to prevent invalid URLs from being used. - Objects of other organizations could be read
Fixed an access control issue that could allow objects belonging to other organizations to be read. - Output of database fields not checked properly against HTML content
Improved the validation and output handling of database fields to prevent HTML content from being processed incorrectly.
You can find more information here:
https://github.com/Admidio/admidio/security
Bug Fixes
- Fixed an issue with system notifications after deleting an email text.
- Fixed an issue in the Messages module when creating or editing messages.
- Fixed an error in messages_write.php.
- Fixed incorrect file extensions when downloading iCal files with Chrome and Safari.
- Fixed several issues in the Documents & Files module.
- Improved the handling of uploaded and unmanaged files.
- Fixed various other issues reported by the community.
Improvements
- Added support for additional OpenDocument file types.
- Improved compatibility when downloading calendar files with different browsers.
- Improved the reliability of system notifications and message handling.
Further Information
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update: Update Admidio
The Admidio Team
This release focuses on improving the overall stability and reliability of Admidio. It includes several bug fixes across different modules, improves compatibility, and resolves a number of edge cases reported by the community. As always, we recommend updating to the latest version to benefit from these improvements.
Due to some problems within version 5.0.12 and 5.0.13 we have directly released version 5.0.14.
You can find more information here: https://github.com/Admidio/admidio/security
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update:
Update Admidio
The Admidio Team
Subscribe to events and performance improvements within the inventory module. Also fixes several bugs and some security vulnerabilities.
You can find more information here: https://github.com/Admidio/admidio/security
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update:
Update Admidio
The Admidio Team
This version fixes several bugs and also some security vulnerabilities. For this reason, we strongly recommend updating to version 5.0.10.
You can find more information here: https://github.com/Admidio/admidio/security
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update:
Update Admidio
The Admidio Team
This version fixes several bugs and also some security vulnerabilities. For this reason, we strongly recommend updating to version 5.0.9.
You can find more information here: https://github.com/Admidio/admidio/security
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update:
Update Admidio
The Admidio Team
This version fixes several bugs and also some security vulnerabilities. For this reason, we strongly recommend updating to version 5.0.8.
You can find more information here: https://github.com/Admidio/admidio/security
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update:
Update Admidio
The Admidio Team
Several security vulnerabilities, some of them critical, have been discovered in Admidio. All of these have been fixed in version 5.0.7. We strongly recommend updating to this version.
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update:
Update Admidio
The Admidio Team
Three new languages—Tamil, Czech, and Romanian—have been added. Additionally, a security vulnerability related to event participation has been fixed.
A full list of all bugfixes can be found in our issue tracker!
We recommend you to read our announcements for version 5 if you have not done before.
If you are new to Admidio and want to install it on your webpage than the following wikipage could help: Install Admidio
The following wiki pages maybe interesting on an Update:
Update Admidio
The Admidio Team