From 25250b7df3893c82c9c70d21730fae5b158d097b Mon Sep 17 00:00:00 2001 From: surtic86 Date: Thu, 22 Oct 2026 08:16:39 +0200 Subject: [PATCH] Release 2.4.1 The Docker image runs PHP 8.5.12, which fixes PHP2Shell (CVE-2026-109618, CVE-2026-109619): two flaws that let an attacker without an account run code on the server when a request ends abnormally. Every earlier image runs an affected PHP. Dependencies are up to date (Laravel 13.38, Livewire 4.4.8, Octane 2.22, Vite 8.3.5). Update now: docker compose pull and docker compose up -d. Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 11 +++++++++++ config/app.php | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b8060ca..34cffae 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,16 @@ All notable changes to this project are documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [2.4.1] - 2026-10-22 + +### Changed + +- Updated to Laravel 13.38, Livewire 4.4.8 and Laravel Octane 2.22, and Vite 8.3.5. + +### Fixed + +- Security: the Docker image runs PHP 8.5.12, which fixes PHP2Shell (CVE-2026-109618, CVE-2026-109619): two flaws that let an attacker without an account run code on the server when a request ends abnormally. Every earlier image runs an affected PHP (2.4.0 runs PHP 8.5.8). Update now: `docker compose pull` and `docker compose up -d`. + ## [2.4.0] - 2026-10-08 ### Added @@ -200,6 +210,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Dark themed UI built with Livewire, Alpine.js, Tailwind CSS and DaisyUI. - Docker images published to `ghcr.io/surtic86/sealshare`, served by FrankenPHP via Laravel Octane. +[2.4.1]: https://gitea.nonameweb.ch/noNameWEB/SealShare/compare/v2.4.0...v2.4.1 [2.4.0]: https://gitea.nonameweb.ch/noNameWEB/SealShare/compare/v2.3.0...v2.4.0 [2.3.0]: https://gitea.nonameweb.ch/noNameWEB/SealShare/compare/v2.2.0...v2.3.0 [2.2.0]: https://gitea.nonameweb.ch/noNameWEB/SealShare/compare/v2.1.0...v2.2.0 diff --git a/config/app.php b/config/app.php index 7ae9999..b13a5cc 100644 --- a/config/app.php +++ b/config/app.php @@ -25,6 +25,6 @@ return [ | */ - 'version' => '2.4.0', + 'version' => '2.4.1', ];