Skip to content

cPanelVault 2.3.1

Latest
Latest

Choose a tag to compare

View all tags
@gioxx gioxx released this 23 Sep 18:13
· 10 commits to main since this release
2.3.1
8020776
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Maintenance release.

Fixes

  • Lock file names are now disambiguated with SHA-256 instead of SHA-1, resolving a CodeQL py/weak-sensitive-data-hashing alert (#20). The digest only keeps sanitized lock filenames unique (no secrets involved), so this was not an exploitable weakness.

Upgrade notes

Lock file names under LOCK_DIR change once. Avoid running 2.3.0 and 2.3.1 side by side (e.g. an old CLI next to an updated container) against the same lock directory while a backup is in progress; leftover old lock files are harmless and can be deleted.

Docker images

docker pull gfsolone/cpanelvault:2.3.1
docker pull ghcr.io/gioxx/cpanelvault:2.3.1

Full changelog: 2.3.0...2.3.1

Assets 2
Loading