Skip to content

v1.0.4

Choose a tag to compare

View all tags
@tchapi tchapi released this 09 Nov 12:09
· 12 commits to main since this release
v1.0.4
071aebd

What's new

  • Security: the image runs PHP 8.4.27, which fixes the PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619)
  • Inline styles with quoted values (e.g. font-family: "Arial") or a + in calc() were double-encoded and ignored by browsers
  • Contacts: an empty or malformed CardDAV answer now reads as "Davis unavailable" instead of crashing
  • Compose: the SMTP transport is built through Symfony's public API, no more reliance on an internal class
  • Static analysis: Psalm 7 joins PHPStan in CI, and the code it flagged was cleaned up

Full Changelog: v1.0.3...v1.0.4

Assets 2
Loading