Skip to content

1.10.3-ls161

Choose a tag to compare

@LinuxServer-CI LinuxServer-CI released this 09 Apr 23:17
· 55 commits to main since this release
45dcea8

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.3-ls161/index.html

LinuxServer Changes:

Add missing icu-data-full to fix bug with TextDecoder and image uploads.

Remote Changes:

Security fixes

This release fixes a security issue of a possible XSS exploit which can be planted via a malicous SVG file upload.

See GHSA-3983-rrqh-mvx5 for more details

Enhancements

  • Add config options CMD_SAML_WANT_ASSERTIONS_SIGNED and CMD_SAML_WANT_AUTHN_RESPONSE_SIGNED for SAML auth, since
    some instances didn't comply with the new defaults of @node-saml/passport-saml