This commit is contained in:
Lauri Ojansivu 2025-10-11 06:13:27 +03:00
parent aab671398c
commit cd0cd64849
11 changed files with 43 additions and 19 deletions

View file

@ -19,6 +19,15 @@ Fixing other platforms In Progress.
[Upgrade WeKan](https://wekan.fi/upgrade/)
# v7.99 2025-10-11 WeKan ® release
This release fixed the following bugs:
- [Improve automatic Snap upgrades](https://github.com/wekan/wekan/commit/aab671398c7ee3d7ea4934c6c9c977ad630fa74f).
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for their translations.
# v7.98 2025-10-11 WeKan ® release
This release adds the following CRITICAL SECURITY FIXES:
@ -29,14 +38,14 @@ This release adds the following CRITICAL SECURITY FIXES:
Thanks to Anynymous Security Researcher and xet7.
- [Security Fix FG-VD-22-078: Prevent SVG Billion Laughs Attack](https://github.com/wekan/wekan/commit/30c1597b658b0ef50fd2efc56786e8b0f08ac72c).
Thanks to Nguyen Thanh Nguyen of Fortinet's FortiGuard Labs and xet7.
- [Security Fix usd-2022-0041: CWE-284 Improper Access Control](https://github.com/wekan/wekan/commit/f6591d7820e01075cba93612a5fdbf692fbe49dc).
Thanks to Christian Pöschl of usd AG and xet7.
- [Security Fix JVN#14269684: Broken access control](https://github.com/wekan/wekan/commit/9720e703fd9432bf0e1bfea2358f8c7ea078f1b1).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix JVN#74210258: Stored XSS](https://github.com/wekan/wekan/commit/e1fa607f87d821accb846f2deef1f388003848d1).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix JVN#86586539: Stored XSS](https://github.com/wekan/wekan/commit/ee79cab7b27f73fab62a00ec49add73fd6f7bcaa).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix usd-2022-0041: CWE-284 Improper Access Control](https://github.com/wekan/wekan/commit/f6591d7820e01075cba93612a5fdbf692fbe49dc).
Thanks to Christian Pöschl of usd AG and xet7.
- [Security Fix JVN#15385465: CWE-79 XSS, that affected WeKan 7.94](https://github.com/wekan/wekan/commit/81c3dc1d956cd7040655940f6569653d7b98fa9a).
Thanks to Sho Sugiyama and xet7.
- Security Fix JVN#80785288: CWE-79 XSS, that affected WeKan 3.94 and v3.95. This was already previously fixed.

View file

@ -249,9 +249,9 @@ cd /home/wekan/app
# Remove legacy webbroser bundle, so that Wekan works also at Android Firefox, iOS Safari, etc.
#rm -rf /home/wekan/app_build/bundle/programs/web.browser.legacy
#mv /home/wekan/app_build/bundle /build
wget "https://github.com/wekan/wekan/releases/download/v7.98/wekan-7.98-amd64.zip"
unzip wekan-7.98-amd64.zip
rm wekan-7.98-amd64.zip
wget "https://github.com/wekan/wekan/releases/download/v7.99/wekan-7.99-amd64.zip"
unzip wekan-7.99-amd64.zip
rm wekan-7.99-amd64.zip
mv /home/wekan/app/bundle /build
# Put back the original tar

View file

@ -1,5 +1,5 @@
appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928
appVersion: "v7.98.0"
appVersion: "v7.99.0"
files:
userUploads:
- README.md

View file

@ -10,7 +10,7 @@ This is without container (without Docker or Snap).
Right click and download files 1-4:
1. [wekan-7.98-amd64-windows.zip](https://github.com/wekan/wekan/releases/download/v7.98/wekan-7.98-amd64-windows.zip)
1. [wekan-7.99-amd64-windows.zip](https://github.com/wekan/wekan/releases/download/v7.99/wekan-7.99-amd64-windows.zip)
2. [node.exe](https://nodejs.org/dist/latest-v14.x/win-x64/node.exe)
@ -22,7 +22,7 @@ Right click and download files 1-4:
6. Double click `mongodb-windows-x86_64-7.0.25-signed.msi` . In installer, uncheck downloading MongoDB compass.
7. Unzip `wekan-7.98-amd64-windows.zip` , inside it is directory `bundle`, to it copy other files:
7. Unzip `wekan-7.99-amd64-windows.zip` , inside it is directory `bundle`, to it copy other files:
```
bundle (directory)

2
package-lock.json generated
View file

@ -1,6 +1,6 @@
{
"name": "wekan",
"version": "v7.98.0",
"version": "v7.99.0",
"lockfileVersion": 1,
"requires": true,
"dependencies": {

View file

@ -1,6 +1,6 @@
{
"name": "wekan",
"version": "v7.98.0",
"version": "v7.99.0",
"description": "Open-Source kanban",
"private": true,
"repository": {

View file

@ -1524,7 +1524,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc
<ul class="toc-list-h1">
<li>
<a href="#wekan-rest-api" class="toc-h1 toc-link" data-title="Wekan REST API v7.98">Wekan REST API v7.98</a>
<a href="#wekan-rest-api" class="toc-h1 toc-link" data-title="Wekan REST API v7.99">Wekan REST API v7.99</a>
</li>
@ -2053,7 +2053,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc
<div class="page-wrapper">
<div class="dark-box"></div>
<div class="content">
<h1 id="wekan-rest-api">Wekan REST API v7.98</h1>
<h1 id="wekan-rest-api">Wekan REST API v7.99</h1>
<blockquote>
<p>Scroll down for code samples, example requests and responses. Select a language for code samples from the tabs above or the mobile navigation menu.</p>
</blockquote>

View file

@ -1,7 +1,7 @@
swagger: '2.0'
info:
title: Wekan REST API
version: v7.98
version: v7.99
description: |
The REST API allows you to control and extend Wekan with ease.

View file

@ -0,0 +1,15 @@
#!/bin/bash
# Release script for wekan versions.
# 1) Check that there is only 2 parameters
# of Wekan version number:
if [ $# -ne 2 ]
then
echo "Syntax with Wekan current-version release-new-version:"
echo " ./release.sh 7.20 7.21"
exit 1
fi
sed -i 's|$1|$2|g' snapcraft.yaml docs/Platforms/Propietary/Windows/Offline.md Dockerfile Stackerfile.yml sandstorm-pkgdef.capnp

View file

@ -22,10 +22,10 @@ const pkgdef :Spk.PackageDefinition = (
appTitle = (defaultText = "Wekan"),
# The name of the app as it is displayed to the user.
appVersion = 798,
appVersion = 799,
# Increment this for every release.
appMarketingVersion = (defaultText = "7.98.0~2025-10-11"),
appMarketingVersion = (defaultText = "7.99.0~2025-10-11"),
# Human-readable presentation of the app version.
minUpgradableAppVersion = 0,

View file

@ -1,5 +1,5 @@
name: wekan
version: '7.98'
version: '7.99'
base: core24
summary: Open Source kanban
description: |
@ -203,9 +203,9 @@ parts:
# Cleanup
mkdir .build
cd .build
wget https://github.com/wekan/wekan/releases/download/v7.98/wekan-7.98-amd64.zip
unzip wekan-7.98-amd64.zip
rm wekan-7.98-amd64.zip
wget https://github.com/wekan/wekan/releases/download/v7.99/wekan-7.99-amd64.zip
unzip wekan-7.99-amd64.zip
rm wekan-7.99-amd64.zip
cd ..
##cd .build/bundle
##find . -type d -name '*-garbage*' | xargs rm -rf