Pydio

8.2.5

(säkerhetsutgåvan)
7 Oktober 2020 - 180MBLäs mer: https://pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-825-hotfix-824

8.2.3

(säkerhetsutgåvan)
26 Mars 2019 - 180MBThis release provides bugfixes and security fixes for Pydio 8, upgrade is highly recommended.

Highlights

• Fix zoho display in IE11
  
• Fix download multiple files on windows env
  
• Fix download all on smb workspace
  
• Fix php72 compatibility
  
• Remove unused variables
  
• Replace deprecated function
  
• Bypass writing error in text log
  
• Fix permission merging with mask
  
• Let video player add its own cookie
  
• Remove support for legacyShares
  
• Seed the version number with server uuid
  
• Prevent opening html content-types in external window
  
• Set WebDAV force basic auth to true by default
  
• Move some more configs in inc file

Läs mer: https://pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-823-security-release

8.2.2

(säkerhetsutgåvan)
28 Januari 2019 - 180MB8.2.2

Pydio 8.2.2 is a bugfix and security release for Pydio 8.X.

Security

• This release provides security fixes and upgrade is highly recommended
  

Bug Fixes

• Fix upload on mobile apps
  
• Hard-coded CORS support - to be added via a proper PSR-7 middleware
  
• Escaping mount type
  
• PSR-7 middleware for CORS requests
  
• Latest changes for CORS middleware
  
• Making it configurable
  
• Fixing order or middlewares and default values
  
• Adding to the release note
  
• Add new api 2 for migration to cells
  
• Fix api2migration json
  
• fix counting function
  
• Change how we set up the Antivirus scanner command
  
• Fix sanitization in odf iframe
  
• Use imports
  
• Fix missing Download All button on minisite
  
• Make sure meta.monitor_fs is shown as experimental - Fix preferences serial/deserialization
  
• Update api2.json with shares API's
  
• Fix Quota computing that doubles quota uisage Refix preferences
  
• Unserialize second parameter is not supported before php 7
  
• From parameter is not used in send_mail action
  
• Update user session if admin is editing himself.
  
• Change indexes on ajxp_feed.
  
• Put all executable paths inside config files
  

8.2.1

Pydio 8.2.1 is a bugfix and security release for Pydio 8.X.

Bug Fixes

• Update user id inside tmpNode
  
• Use a selector for possible update sites
  
• Remove unnecessary files from vendor
  
• Fix notifications checks
  
• Fix group labels inconsistencies
  
• Escape argument on the meta.mount form
  
• Add a PSR7 middleware to handle CORS Requests for the REST API
  

8.2.0

Pydio 8.2.0 is a bugfix and security release for Pydio 8.X.

Highlights

• addition of php7.2 support
  

Bug Fixes

• Update html changelog
  
• Missing hook for filter_boot.conf
  
• add locations that should be denied
  
• fixing german translation
  
• Fix filter accessible files before adding to zip
  
• Fix sync view between public share and original
  
• Fix list task in public share
  
• Always open upload panel in minisite as background tasks panel is not inserted
  
• Fix js request for resource without attaching cookie
  
• Fix trim user id
  
• Fix workspace word
  
• Fix video.js version
  
• Fix global quota
  
• PHP7.2 fixes
  
• Read latest_note url from server data instead of passing url as parameter
  
• Fix FF right click menu - Close #1411
  
• Use Html2Text to transform html to text in emails (cf PR #1310)
  
• Better exception catching or it can break webdav upload. Close #1413 - Track count() usages for php7.2
  
• Update phpseclib to fix create_function call
  
• each() function is deprecated
  

8.0.2

Highlights

• This release brings php7.1 support
  
• Password Policy plugin: require a specific set of complexity rules for your users passwords
  
• Bookmark List is back! it was missing since the rewrite of Pydio 8 interface.
  

Bug Fixes

• Fix ldap mapping attribute to roles
  
• Update version to 8.0.1
  
• Fixing a remote stream function
  
• Adding ability to re-generate refresh token if expired
  
• Missing hook for filter_boot.conf
  
• Previous vpath adapter is replaced by use_path_style_endpoint in client config (for custom url)
  
• Make sure action.cart will mount its react component by default.
  
• Clean manifest from old actions
  
• Disable background copy if not using session api, seems to break sync client in some case.
  
• Fix test before create new alias class
  
• Fix set context for object
  
• Fix test key "type" if it exists
  
• Fix test key "type" if it exists
  
• Fix migration public link with password
  
• Fix collabora on smb + session credential workspace
  
• Fix collabora on smb + session credential workspace
  
• Fix collabora on smb + session credential workspace
  
• Updated Korean translation
  
• Missing comma in Korean i18n file was added
  
• Fix remember me feature
  
• Fix upload dialog width when there are few uploaders - Close #1384
  
• Fix #1376
  
• Replace Pear dependency to Mail_mimeDecode to Composer library. Should remove problematic plugin dependency, see #1385
  
• Force redirecting to https version of Pixlr - See #1371
  
• Php doc fix
  
• False negtive on OB detection
  
• Fix #1393
  
• Typo in forbidden
  
• Typo
  
• Fix postgresql convert false to "false"
  
• Remove fuzzy search and upgrade elastica to 5.3.0
  
• Fix displaying user in sql groups
  
• Close session before reading audio file
  
• Remove unused img_library and associated images
  
• Fix developer doc link - Close #1395
  
• Add support referral binding
  
• Implement a default displaymode and default sorting parameter per workspace
  
• Fix download resuming
  
• Fix #1355 - Use renamed from SOURCE instead of renamed to NODE
  
• Remove src attributes
  
• Fix api v2 create user
  
• Reduce Batch size for delete - Fix usage of PATH parameter in S3 driver - Close #1365 at last !
  
• Avoid some js errors with empty values
  
• Forgotten console
  
• Fix getS3Service() method
  
• Add param for smb option
  
• Fix error while index mounted repo
  
• Update password fields everywhere to avoid allowing save when not correctly set.
  
• Fix Admin create/delete group works only if group id starts with double slash
  
• Fix disclaimer dialog (enable scrollBody)
  
• Throw an error when trying to restore on an existing file. Close #1368
  
• Fix write-only workspace : wrong response header - do not show activity log. Close #1367
  
• Hack for user specific locks and api access
  
• Fix quota not updating on workspace switch
  
• Change Accept-Ranges header
  
• Plugin Load ClassFile for a given php version if necessary
  
• Fix Advanced Search and meta fields, inc. missing Content field. Factorize in AbstractSearchEngineIndexer. Try to fix login window not appearing in some case Fix Quota panel not refreshed
  
• New BookmarksList - Meta/Ctrl key support in main files list (close #1351)
  
• Forms: lower onChange trigger timeout to avoid field blinking
  
• Fix field validation

Läs mer: https://pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-822-security-release

8.0.1

(större version)
21 November 2017 - 50MBPydio 8 features a host of new features and significant UX improvements dedicated to helping companies secure their data.

New Features

• Simple Sharing - EasyTransfer: Pydio 8 includes EasyTransfer, a new, intuitive "upload-and-share" web interface for organisations in need of a very simple sharing tool. EasyTransfer allows users to instantly share all types of documents with a simple drag-and-drop interface. This gives organisations an out-of-the-box, web-based tool for internal and external file sharing and collaboration, while maintaining data security, ownership, rights-based access and complete control.
  
• Fully Redesigned Interfaces: Continuing to build on the platform’s smooth and efficient design, Pydio 8 has a fully rewritten web interface, based on Google's Material Design principles. Thanks to the use of advanced web technologies, the new user interface is even more intuitive and comfortable for end users. In addition, the rewrite dramatically simplifies the ability to rebrand the Pydio user-interface. Included in the Enterprise Distribution, the new "Vanitizer" tool brings a consistent management of colors, images and backgrounds allowing corporate users to easily white-label Pydio as their own, branded file sharing solution.
  
• Share Tracking & Activity Reports: Pydio 8 provides end users with the ability to track all documents they have shared through a new monitoring tool: It is now possible to send a single link to many different people and track exactly who accessed it; A new dashboard presents key figures for each workspace, showing how many files are shared, with how many people, etc.; On the admin side, auditing the platform's activity is easier and quicker, thanks to the new Shares Explorer functionality, allowing fast and easy creation of activity reports based on shared files, users, workspaces, etc. These features give users and admins a complete overview to quickly spot and address mistakes or anomalies.
  
• Efficient Address-Book and Teams Management: The overhaul of the Address-Book design and functionality now allows end users to create designated teams in order to share certain data with only a specific group of people. User-generated teams offer granular role-based controls, with the ability to share files in one click, and to easily update team roles and participants: automatically applying new roles to existing shared content.
  
• Enriched and Optimized Admin UX: The administration dashboard within the Community Distribution has been given a complete overhaul, reaffirming Pydio's commitment to offer a full, workable open source solution for businesses and larger scale users.
  
• Other admin improvements in Pydio 8 include: a new feature for easily and quickly importing user information in a simple CSV format; Federated Sharing across distributed instances, as well as a powerful new Parameters Search Engine incorporated into the Enterprise Distribution: allowing Admins to instantly find or discover any required parameter.

6.2.2

(säkerhetsutgåvan)
20 Januari 2016 - 50MBPydio Core 6.2.2 is another bugfix release providing compatibility fixes for non-standard plugins to the core.

Noticeable changes

• Over-agressive caching could end up creating issues in IE when switching workspaces
• Security: sanitization strengthen for potential XSS attacks.
• Fix regression on "Remember Me" switch
• Fix Video Player for FireFox
• Joomla Bridge Compatibility (broken by last Joomla version).

Changelog

• Update Italian translation for plugins: 'access.ajxp_conf', 'action.compression', 'action.share', 'core.ajaxplorer', 'core.notifications'
• Take the active mailer plugin , not the first that comes
• [core.mailer] Update the class which takes the active mailer plugin
• [conf.sql / access.ajxp_user] Improve Team management.
• Websocket: if there's an internal BIND address, it's most likely the address the php server will have to connect to. Added a Todo to handle REST auth.
• Unserialization can fail on some systems, make sure to reload role if it's not an object after waking up object.
• Fix SFTP username containing dash character (git issue #1014)
• [gui.user] Fix display & i18n message
• [gui.ajax] Create a "legacy" version of the bundle without ReactDND, and add fallbackCondition and fallbackFile in the js/css ressources to load alternative versions.
• Make test on personalRole stronger if there is an error at deserialization time.
• IE Caching policy is too agressive, we have to add some random ID to force reload sometime.
• Renamed constructor for PHP7 compatibility
• Update CLA URL
• Handle repository with deleted parent. Should fix #1025
• Typo in getRelatedNotifications() method (not used).
• Update CONTRIBUTING.md
• [core.notifications] fix getRelatedNotifications()
• Fix #1019
• Util function to get user label either from role directly or from user object.
• Fixed recursive indexation issue with FTP workspaces.
• Wrappers must declare isSeekable() to enable listing optimizations in fsAccessDriver.
• Make sure not to load an indexed document if the meta.change event comes from a "delete" operation.
• Enforce sanitization of user id when sending to error log.
• Update window.MessageHash when changing i18n. Alternative fix #1021
• Typo in rest parameter for role_update_right
• Pass optional parameters to the node->load() method.
• Pass optional cursor parameter to the logs. SQL logger can use it as a query limiter to only load data starting from a given id. Return cursor attribute in XML as well.
• Use udevil to mount instead of sudo
• Improve performance: caching ldap search result in class static variable
• Improve notifications on shared resources - Separate Location from the notifications - Avoid empty label in Alerts feed.
• Better catch of imagick call error.
• Fix tmp folder for unoconv
• Strip only left space on dirname - Fix #1023
• Imagick: Parameters should follow convert command.
• Fix rewind on SchemeTranslator wrapper - Prevent editing meta on non-writeable resource.
• [auth.remote] Make sure to keep the initial session.save_handler - Fix Joomla connector.
• Joomla plugin: make sure to switch back to previous session, as the session content is saved in register_shutdown_handler.
• Compute locationType when setting node, so that it can be serialized/unserialized
• Do not cache Sharing configs - Fix #1013
• Make sure to use === when comparing to constants, or repo 0 can be considered as repo_scope_all. Enable kvcaching in non-rest controller.
• [ShareCenter] Fix unshare workspaces from My Account zone - Fix readonly mode not being switched correctly in some case.
• Registry Cache Key : repo can be null.
• Fix Exif metadata display in InfoPanel when no GPS parameter is defined in the plugin or no GPS data is present in photo.
• Fix regression on contextual menu content and default item display.
• Fix regression on "Remember Me" feature.
• Replace pydio.getController().parseXmlMessage() by PydioApi.getClient().parseXmlMessage. Same for triggerDownload() moved as static method on PydioApi.
• Fix Eml Attachment Download.
• Replace all Controller.parseXmlMessage calls by PydioApi.getClient().parseXmlMessage in manifests.
• Replace ' by " to avoid label truncating on users/teams listing. Better sanitization and error catching on Team creation.
• Prevent editor.browser to open SVG files directly, always force as attachment.
• Pass the $url to isSeekable(), allowing to return different value depending on the path (=> return false for Zip files in fsAccessWrapper, or it's messed up when browsing zip subfolders).
• Declare restParams on compress in action.powerfs, otherwise API is not working for this action when plugin is active.
• Fix ChangesTracker for filter + mask management. Fix indexation issue when copying folders.
• Specific fix for video player for Firefox
• Update sdk generator: do not skip already parsed actions.
• Setup wizard can now be translated completely. Added german translations for setup wizard
• Fix display quota on FreeBSD
• Fix file/folder message on move. Close and replace PR #1000 ($dirRes is never set in that case)
• Update .travis.yml
• Updated ca/es files
• PHP7 Constructors fixes
• PHP7 Constructor fixes
• Missing Comma in ca.php
• Add Travis Badge
• Fix #1010 Zip Browsing on Windows Server
• Add new parameter for signature - Add Frankfurt & Seoul Regions. Close #846
• Fix log grouping Fix Copy Selection action
• Fix google shortner api key - Close #1030
• Make sure to not return an empty value.
• Fix some specific zip extraction case on Windows Server.
• Fix multimode value : check instance_name OR group_switch_value
• Fix MacOS Yosemite / El Capitan Detection
• Fix italian "Invite" button: missing translation strings.
• HTML Base Tag is not correctly applied in IE10 when dynamically inserting "link". Add an data-hrefRebase tag to be processed (prepending the base) on ie10 only.
• Close session when sending binary files. Could create a race condition with tryLogUserFromCookie.

6.2.1

14 December 2015 - 50MBPydio Core 6.2.1 is a bugfix release providing compatibility fixes for non-standard plugins to the core.

Changelog

• Some servers do not return the "." value, send a fake stat in that case by grabing the stat from AJXP_DATA_PATH.
• Fix tab char in sql script
• [action.disclaimer] Make sure to invalidateLoadedRepositories() after updating the lock value.
• [access.fs] Fix is_readable call for folders inside API. Fix #988
• try catch every single file when we extract an archive
• Update website
• Update README.md
• [meta.syncable] Fix a wrong flatten case when deleting/restoring to/from the recycle bin.
• Fix shortcuts disabling on SearchEngine. Fix #994
• Fix Root Group management issues.
• Change DefaultRights management: update Root Group, do not update personal roles anymore, otherwise it always takes precedency on parent groups/roles. Do not skip the AJXP_CLEAR_VALUE, set to the merged role.
• Fix display in search engine leaving the group headers on empty result.
• Observable: make a copy of observers otherwise if there are many observeOnce ones they are not correctly applied.
• Typo in EmptyNodeProvider Fix user history and ?goTo= mechanism. If skip_user_history is fale, use goTo, otherwise use URL directly.
• User dashboard, switch action bars to dataModelElementId instead of global events.
• Admin Panel: to not list Templates in group/roles ACL - Fix Legacy shares listing not properly filtered.
• Core.* plugins should be appended at the beginning of active lists. Fix compatibility of remote logout with 6.2.X : add a forbidOverride attribute to block further merge in registry, otherwise session_login logout action will always take precedency.
• Fix load binary
• Make too short string smaller in french
• Add include Hook for to load and update user info
• Fix update template label
• Pass a scope string or a repository object to getFilteredOption() to test on the AJXP_REPO_SCOPE_SHARED scope if necessary.
• Fix typo in ENABLE_FOLDER_SHARING value testing Fix check for USER_SHARED_USERS_LIMIT on mergedRole instead of personalRole
• Update getFilteredOption signature
• Unused images - Fix #1001
• Glob can return false on error, we should check before running a foreach.
• [action.share] Reset max download and max expiration time Fix #1004
• Fix CAS button in login interface in 6.2
• Add method groupExists() instead of using listChildrenGroups() as it can create a recursivity in auth.ldap.
• Add method groupExists() implement in serial and sql confdriver
• Fix loop in creation of groupPath
• [editor.pdfjs] Fix for IE when Pydio is inside an iFrame.
• [auth] When guest is enabled, make sure to invalidateLoadedRepositories() at login time, otherwise they are already in the session. Fix #1002
• [gui.ajax] FilesList: add bulkUpdating mode to avoid triggering initRows() on each child_added event.
• [gui.ajax] Always limit search engine to 100 results by default, use bulkUpdating when parsing results, and display the total count plus a "show all" link.
• [index.lucene] Send a <pagination> tag in results if limit is set and number of hits is cut.
• Compiled version of css
• [editor.pdfjs] Add fake file name parameter to the file url passed to pdfjs, to have a correct info in the pdfjs properties viewer.
• [phpversion test] Update php version to 5.4.
• [gui.ajax] InfoPanel : display node label instead of basename if set.
• Revert previous core plugins reordering issues
• Fix actions disabling merging
• [core.ajaxplorer] Update default WEBDAV_BASEURI as it was still /ajaxplorer/share.
• [meta.git] Remove dependency to meta.svn plugin
• [css] Fix contrast on history browser
• [action.scheduler] Create simple react dashboard for enterprise admin panel. Just trigger same ol' actions.
• [utils] getWorkspaceShortcutUrl use "?goto=" or "/ws-" depending on the skip_user_history status.
• [AuthService] Avoid error if trying to execute tryToLogUser(). Log to error though. [authfront.webftp] Fix login form not closing after successfull login.
• [ConfService] Use a dedicated UserAlertException to send back OAuth message and avoid removing temporary failing workspace from the list. Use it in access.dropbox driver.
• Update package.json versions
• [action.updater] Point to new update site
• [access.ajxp_conf] Fix strange horizontal scrolling

6.2.0

(större version)
18 November 2015 - 50MBPydio 6.2.0 brings massive performance improvements, many bug fixes from previous version, and a couple of new features.

New Features

• Performances: we gained an average 5 times in performance on every request. Using optional in-memory KeyValue Caching adds a tremendous improvement for Rest calls (sync).
• Tar gz / bz2 support: creation and extraction of archives
• Web UI: Better mobile support. Under the hood, we started migrating our whole JS platform from legacy libraries to Ecma Script 6. We now use Grunt tasks to compile/minify the JS
• Packaging: Rework of our Linux packages from ground up, splitting plugins into separate packages, with packaging best-practice in mind.
• PHP7-Ready: we chased language issues that could compatibility problems with PHP7.

6.0.8

2 Juli 2015 - 50MB