Releases: nuxsmin/sysPass
Releases · nuxsmin/sysPass
Some fixes
- [MOD] Modified logout behavior to prevent login for two times. Related #189
- [MOD] Updated German translation. Thanks to @CyrosX
- [FIX] #198, #166. Put a delay between search requests to not fill the keybinding API very quickly. Thanks to @alexanderbuhler
- [FIX] Fixes #199. When doing 2FA login, the user's preferences weren't loaded. Thanks to @ManuDominguez
- [FIX] #166. Fixed error when searching for numbers or ip addresses.
- [FIX] Fixes #185.Thanks to @bitking
- [FIX] Fixes #186. Thanks to @wagnst
- [FIX] Related #189. Login not done for the first time randomly.
- [FIX] Fixed issue when importing accounts from CSV/XML. Form fields were not fully sent.
Thanks to all that contributed with their feedback and support!!
Happy New Year
Fixed some silly bugs...
- [MOD] Improved login when the webserver auth is used.
- [MOD] Updated Russian translation. Thanks to @TitovLab
- [FIX] Fixed user id checking instead login when using webserver auth. Thanks to @TitovLab
- [FIX] Integer casting for boolean values on users management. Thanks to @maseht
- [FIX] Fixed multibyte string truncation issue. Thanks to @TitovLab
- [FIX] Fixed password custom field double encryption. Thanks to @vvascautan
Happy Holiday
Many bugfixes and improvements.
- [MOD] Updated French translation. Thanks to @cyril
- [FIX] Fixed Update accounts' history master password hash when upgrading from previous versions. Thanks to @TitovLab
- [MOD] Modified account history select box behavior when account id matches history id.
- [FIX] Fixed javascript translation in complexity dialog. Thanks to @TitovLab
- [ADD] Added Russian translation. Thanks to @TitovLab
- [FIX] Upload files rewritten to fix issue with UTF8 strings. Removed FileDrop JQuery plugin . Thanks to @TitovLab
- [FIX] Fixed css to fit to card layout.
- [FIX] Set maximum uplodaded file sizes as set in accounts config. Thanks to @cgarciaarano
- [FIX] Fixed tooltip showing in classic theme. Thanks to @gabrielsoltz
- [FIX] Fixed path and directory separators to be system independent. Thanks to @stawiu
- [FIX] Fixed number parsing by request analyzer. Thanks to @gabrielsoltz and @GastonLex
- [FIX] Copy to clipboard action not shown when show optional actions preference is set.
- [MOD] Enable LDAP debug mode if global debug mode has been enabled.
- [FIX] Fixed issue when importing accounts from CSV file. Thanks to @basil-twisleton
- [FIX] Fixed typo on upgrade query to version 1.1.2.20.
Minor bugfixes and translations
- [FIX] Fixed issue on copy password to clipboard on Chrome browser. Related #140. Thanks to @basil-twisleton
- [FIX] Fixed English translation. Related #140.Thanks to @basil-twisleton
- [FIX] Fixed displaying required field when it is a select tag. Related #140.Thanks to @basil-twisleton
- [FIX] Fixed issue when adding an user from LDAP when no group/profile is set (disabled by default). Fixes #157
- [MOD] Modified behavior when adding a new customer from account page. Related #140.Thanks to @basil-twisleton
- [MOD] Updated German translation. Thanks to @wagnst
Fixes
- [FIX] Fixed issue when searching an user groupmembership to access to an account. Thanks to @basil-twisleton
- [FIX] Closes #157. Fixed issue when adding LDAP users that don't have any default group/profile set, they are disabled. Thanks to @CyrosX
- [FIX] Closes #154. Modified a string in the ldap template. Thanks to @tsener
- [MOD] Changed default behavior when creating a new account. Now a blank form is displayed. Thanks to @basil-twisleton
- [MOD] Closes #155. Extensions cannot contain other characters than "A-Z", "0-9", "_" and "-". Thanks to @tsener
1.2 The Breaking sysPass
Before a long time of efforts it's out, the new sysPass version is stable and ready.
Many thanks to all that people that contributed to improve and get it better!!
General improvements:
- Security improvements preventing common threats (SQL Injection, XSS, CSRF)
- Fully MVC allowing themes support
- Using PKI for forms passwords encryption
- Using TOTP for 2-factor authentication
- Export to sysPass encrypted XML file and import from popular formats
- API authorizations
- Custom fields to include some secure extra data
- New visual theme with Material Design Lite by Google
- 60% of code rewriting for improve performance and reusability (2x faster)
- Available languages: English, German, French, Hungarian, Catalan and Spanish
- And many more features
Test it, Share it!!
Working on: Debian 7/8, Ubuntu 14 LTS, CentOS 6/7 and Gentoo.
Upgrade info at http://wiki.syspass.org
1.2-RC5 Tunning
- [ADD] New classes to improve performance and code readability.
- [ADD] Security enhancement for master password in session.
- [MOD] Minor UI tweaks.
- [MOD] Improved config handling.
- [MOD] Code cleaning.
- [FIX] Accounts' main group were not set when the user hadn't enough privileges.
- [FIX] Accounts restoration didn't restore the account's main group.
- [FIX] Fixed issue with master pass hash after upgrading from 1.1. WARNING: the accounts encryption have not changed, only the master pass hash that is used to verify the correct password.
1.2-RC4 Almost Ready
Lot of improvements and fixes:
- [ADD] New copy-to-clipboard using only Javascript NO flash needed (gooood).
- [ADD] New method to optimize/minimize CSS and JS files.
- [ADD] Temporary password can be viewed within session.
- [ADD] Old backup and export files are deleted when performing a new backup/export.
- [ADD] Added the ability to force the connection through HTTPS.
- [ADD] Added back button on some modules.
- [ADD] Added link to add category from new account form.
- [ADD] New user preferences option to sort accounts searching by views.
- [MOD] CSS and JS files are now minimized by default.
- [MOD] Updated translations.
- [MOD] UI tweaks.
- [MOD] Improved forms passwords encryption.
- [FIX] Fixed issue on enabling secondary users/groups edit on accounts.
- [FIX] Fixed issue when sending email request to blank recipients.
- [FIX] Fixed event log navigation bar issue.
- [FIX] Fixed issue that custom fields data were not encrypted again when master password is changed.
- [FIX] Fixed issue on copy-to-clipboard when viewing account details.
- [FIX] Fixed issue when sorting accounts search.
- [FIX] Fixed issue when copying accounts (Invalid action message).
- [FIX] Fixed issue while retrieving the public key when no session is active from Javascript to sign.
- [FIX] Fixed language detection issue.
- [FIX] Fixed issue when checking ldap connection. Thanks to @JvdW
- [FIX] Fixed some forms issues
- [FIX] Fixed issue when checking user request for changing password
1.2-RC3 New User Preferences
The user preferences are finished, but it will be updated with new ones on next releases.
- [ADD] New user preferences available
- [MOD] CSS fonts are now stored locally for Material Blue theme
1.2-RC2 Security Fixes
- Switched to BCRYPT for hashing passwords and key derivation. This improves password security by performing more secure hashes and keys.
- Some tweaks on forms passwords decryption
- Fixed issue when blank custom fields are retrieved for an item.
WARNING: Master password should be reentered by users (you can use a temporary password)
Please, do a full backup before upgrading.