Docker BackupPC 4.4.0-13

Added

• STARTTLS is now supported on LDAP-based authentication (#100)

Fixed

• Update base image to Alpine 3.23.4 (fixes CVE-2024-38475 in apache2-utils, KEV;
  regreSSHion CVE-2024-6387; XZ backdoor CVE-2024-3094).
• Backport XSS fix in CGI/View.pm for the num query parameter from BackupPC
  master (commit 58b0bb4); originally patched in 2012, dropped in 3.3.0,
  re-applied upstream for the unreleased 4.4.1.
• Quote $TZ and $output variables in shell scripts (SC2086).
• Convert configure_admin from string to array to handle quoted arguments
  correctly (SC2089/SC2090).
• Replace sed with bash parameter expansion for LDAP filter escaping (SC2001).

Changed

• Remove VERSION file; release tag is now the single source of version truth.
• Pin rsync-bpc to upstream commit 1ad3f70 (2025-08-18) instead of release
  tag 3.1.3.0 (2020-11). The release tag does not build on GCC 14+
  (Alpine 3.20+) due to two source bugs that have been fixed on master without
  a new release. Pinned commit includes all GCC 14/15 fixes and ~5 years of
  memory-safety bug fixes from upstream.
• Add lint jobs to the CI pipeline: hadolint, shellcheck.
• Add grype security scan (anchore/scan-action); fails on critical fixable CVEs.
• Switch to official Docker actions: docker/build-push-action,
  docker/setup-buildx-action, docker/setup-qemu-action.
• Bump all GitHub Actions to latest pinned versions; add Dependabot for Actions.

Docker BackupPC 4.4.0-12

Modified

• Fix deprecation warnings in lighttpd

Docker BackupPC 4.4.0-11

Modified

• Add a fix to make BackupPC runable with Data::Dumper >= 2.182

Docker BackupPC 4.4.0-10

Modified

• Update base image to Alpine 3.18.4

Docker BackupPC 4.4.0-9

Added

• Provide pigz utility to do faster GZIP archives

Modified

• Update base image to Alpine 3.15.0

Docker BackupPC 4.4.0-8

Added

• Docker image is now supporting multiple architectures: AMD64, ARM64 and ARMv7

Modified

• Update base image to Alpine 3.14.2

Docker BackupPC 4.4.0-7

Modified

• Update rsync-bpc to 3.1.3.0
• Fix processing of LDAP filter from environment variables (#58)

Docker BackupPC 4.4.0-6

Modified

• Update base image to Alpine 3.14.0
• Explicitly enable mod_openssl lighttpd module when TLS is enabled (#56)

Docker BackupPC 4.4.0-5

Modified

• Fix Docker images deployment

Docker BackupPC 4.4.0-4

Added

• The system configuration file /etc/msmtprc for msmtprc is not overwritten
  if it already exists at container initialization. Update documentation on that matter.