Pydio 5.2.4 - Stable

This is an important security & bugfix release, upgrade is recommended. Security is enforced in the meta.mount plugin and we upgraded some third-party libraries that had a known vulnerability.

• Date: 17th, Oct. 2014
• License: Affero GPL
• Copyright: Charles du Jeu 2014
• Demo: https://demo.pyd.io/
• Download: zip, tar.gz, rpm, deb
• Upgrade from 5.2.3: In-app tool, or via linux package managers - nothing special to do.
• Contributors: Cdujeu, Signalwerk, Ellega, StephanHuber, c12simple, JohnRegan, SMandon -
• Vulnerabilities reported by Patrik Lundin, Christian Biamont and Lukas Reschke

Note: if the in-app upgrade can't find any available packages, make sure that the Update Center plugin (Under "Features Plugins") update site parameter is pointing to https://pyd.io/update instead of http://www.ajaxplorer.info/update (although redirection is ensured).

As a side-note, and although not directly linked to Pydio, we urge you to update your servers to fix the various major vulnerabilities disclosed recently in very common libraries, namely Poodle and ShellShock.

Bugfixes

• Handle a path filter on the changes feed to synchronize only a subfolder (details)
• Add the missing German translation (details)
• Make sure to update $lastSeq if we "continue" the loop (details)
• Make sure the like $filter expression ends up with a slash, otherwise it can take files beginning with the same prefix. (details)
• Update CLA link (details)
• smb.php with Windows OS (details)
• Update README.md (details)
• Remove scrutinizer badge it's too depressing. (details)
• Add Docker folder (details)
• Create configure_php_modules.sh (details)
• Adding options for separate client/server websocket settings (details)
• smb.php don't work with lot of files or folders if "Windows OS" (details)
• SSL detection correction (details)
• New action test_upgrade_scripts to ease production (cherry picked from commit a75f9a4) (details)
• Fix WebODF file sanitization (cherry picked from commit bd1cd3f) (details)
• Pixlr have changed their domain to apps.pixlr.com - Fix #500 (cherry picked from commit 5a0187e) (details)
• Update Sabre to 1.8.10 (cherry picked from commit bbc1137) (details)
• Fix #629: false negative alert when moving a file to another workspace with same folder path (cherry picked from commit 5b1a77f) (details)
• Strengthen meta.mount security by passing the password via environment variable instead of the command line. Still an optional parameter as upgrading will require changing sudo file as well. (cherry picked from commit 5449444) (details)
• ActivityMonitor: cap the intervalue by max 32bit integer to avoid GUI hanging if php session.gc_maxlifetime is too big. Should fix #639 (cherry picked from commit 6fefa80) (details)
• Add author to the Git commit command, otherwise it can prevent auto-commit (cherry picked from commit 50fa673) (details)
• Fix error moving files between different wrapper (cherry picked from commit 5025634) (details)
• Set update site to https (cherry picked from commit 2d63ac6) (details)
• Fix apache pydio.conf for RPM (cherry picked from commit 14cdc03) (details)
• Typo in SQL UpgradeDB step. Probably non-functionnal in 5.2.3 ! (cherry picked from commit a85eef4) (details)
• Fix radio button problem in Role Editor (cherry picked from commit cdcc459) (details)
• Fix WebDAV enabler & password form (close #556) (cherry picked from commit 5e78246) (details)
• Allow WS creation on read-only FS if option CREATE is not set. (cherry picked from commit ca130b5) (details)
• Silently delete failing alert to avoid filling error logs (cherry picked from commit 357805d) (details)
• Fix Session Credentials & WebDAV Basic Auth (cherry picked from commit 0552dfd) (details)
• [edito.pixlr] Fix #500, properly close editor tab after saving (cherry picked from commit 85260f5) (details)
• core.mailer: Make sure to add a typed email to the list of "to", if people don't explicitely click on the auto-complete list. (cherry picked from commit 9581bf0) (details)
• Update CONTRIBUTING.md (cherry picked from commit 77ce3d6) (details)
• Disable saveState on Tabulator (details)
• Fix IE9 error in FilesList (details)
• Fix IE11 carriage return not working in Text Editor (details)