Skip to content

v8.3.2

Latest

Choose a tag to compare

@Chocobozzz Chocobozzz released this 26 Oct 12:51
· 125 commits to develop since this release
v8.3.2
b8055f5

SECURITY

  • critical Upgrade vulnerable sharp (image processing dependency) that can lead to a RCE with a special crafted SVG file GHSA-wq5f-xc86-pv6w
  • high Fix federation vulnerability where a remote attacker could exploit the redirection of cached remote objects to impersonate actors of another instance and modify its videos federated on an instance GHSA-5j4v-77rx-h5qg

Bug Fixes

  • Update whisper-ctranslate2 package to fix installation on Python 3.12+
  • Fix channel deletion cancel showing success message #7837
  • Fix podcast feed podcast:medium value with audio enclosure preference
  • Fix audio download with a webp thumbnail #7833
  • Fix crash when remote video has no likes/dislikes collections #7836
  • Limit resource usage when generating thumbnails