Softpedia >Linux >Internet >HTTP (WWW) >Seafile Server >  Changelog

Seafile Server Changelog

What's new in Seafile Server 4.4.4

Oct 27, 2015
  • [fix] Fix support for syncing old formatted libraries
  • Only import LDAP users to Seafile internal database upon login
  • Only list imported LDAP users in "organization->members"
  • Remove commit and fs objects in GC for deleted libraries
  • Improve error log for LDAP
  • Add "transfer" operation to library list in "admin panel->a single user"
  • [fix] Fix the showing of the folder name for upload link generated from the root of a library

New in Seafile Server 4.4.2 (Oct 13, 2015)

  • [fix] Fix sometimes a revision is missing from a file's version history
  • [security] Use HTTP POST instead of GET to remove libraries
  • A few other small UI improvements

New in Seafile Server 4.3.1 (Jul 29, 2015)

  • [fix] Fix generating image thumbnail
  • [UI] Improve UI for sharing link page, login page, file upload link page
  • [security] Clean web sessions when reset an user's password
  • Delete the user's libraries when deleting an user
  • Show link expiring date in sharing link management page
  • [admin] In a user's admin page, showing libraries' size and last modify time

New in Seafile Server 4.3.0 (Jul 25, 2015)

  • Security fix:
  • Regenerate Seahub secret key:
  • Regenerate Seahub secret key. The old secret key lack enough randomness (A string generated from random number between 1 to 100,000). The secret key is used in generating password reset link. The random string in password reset link is hash value from a user's ID, last login time (in seconds) and Seahub secret key.
  • Attack:
  • An attacker can generate a valid password reset link using brute force way. (For users stored in LDAP/AD, the password reset link has no effect)
  • Fixes:
  • In community edition v4.2.3 and pro edition v4.2.1, the algorithm for generating password reset link is changed to include the hash value of the old password, avoiding the attack.
  • In v4.3.0, the upgrade script will regenerate a strong secret key.
  • For those who don't want to upgrade to v4.3.0, you can also download the script from https://github.com/haiwen/seahub/blob/c90394bb084addfaad4d28647db05a2f5f6c063f/tools/secret_key_generator.py. Run this python script and use the generated string to replace the old string in seahub_settings.py
  • Remove ".seaf" format:
  • The .seaf file format is removed because it is seldom used and is vulnerable to XSS attach.
  • Improve desktop client syncing performance:
  • In old version, the performance is limited by the following factors...
  • The whole folder is scanned to generate the modification message
  • No multi-threads uploading/downloading (This limits transfer speed for lots of small files)
  • By redesign how the modification messages are generated and adding multi-threads support, the syncing performance is improved significantly.
  • Improve the web interface:
  • The old private share in the sharing dialog is divided into two sub tabs, share to user and share to group. In the dialog, you can check existing shares, add a new share and remove an shares.
  • A button is added to the sharing link dialog. It enables you to generate a random 8 characters password.
  • [UI] Improve ui for file view page
  • Remove direct single file sharing between users
  • Remove message module
  • Others:
  • Add file locking (Pro only)
  • [API] Add API for generating sharing link with password and expiration
  • [API] Add API for generating uploading link
  • [API] Add API for link files in sharing link

New in Seafile Server 4.2.3 (Jun 19, 2015)

  • Add global address book and remove the contacts module
  • Use image gallery module in sharing link for folders containing images
  • [fix] Fix missing library names (show as none) in 32bit version
  • [fix] Fix viewing sub-folders for password protected sharing
  • [fix] Fix viewing starred files
  • [fix] Fix supporting of uploading multi-files in clients' cloud file browser
  • Improve security of password resetting link

New in Seafile Server 4.1.2 (Mar 31, 2015)

  • [fix] Fix several packaging related bugs (missing some python libraries)
  • [fix] Fix webdav issue
  • [fix] Fix image thumbnail in sharing link
  • [fix] Fix permission mode of seaf-gc.sh
  • Show detailed time when mouse over a relative time

New in Seafile Server 4.0.6 (Feb 11, 2015)

  • Important:
  • [fix] Fix transfer library error in sysadmin page
  • [fix] Fix showing of space used in sysadmin page for LDAP users
  • Improved trash listing performance
  • Small:
  • [webdav] list organisation public libraries
  • Disable non-shibboleth login for shibboleth users
  • [fix] Fix wrong timestamp in file view page for files in sub-library
  • Add Web API for thumbnail
  • Add languages for Thai and Turkish, update a few translations

New in Seafile Server 4.0.5 (Jan 22, 2015)

  • Important:
  • [fix] Fix memory leak in HTTP syncing
  • Repo owner can restore folders/files from library snapshot
  • Update translations
  • Only repo owner can restore a library to a snapshot
  • Small improvements:
  • [fix] Remote redundant logs in seaf-server
  • [fix] Raise 404 when visiting an non-existing folder
  • [fix] Enable add admin when LDAP is enabled
  • Add API to get server features information (what features are supported by this server)
  • [fix] Fix throttle for /api2/ping

New in Seafile Server 4.0.1 (Dec 9, 2014)

  • [fix] Fix bugs in syncing with HTTP protocol
  • Add upgrading script (from v3.1 to v4.0)

New in Seafile Server 3.1.7 (Oct 20, 2014)

  • [fix] Fixed performance problem in WebDAV extension
  • [fix] Fixed quota check in WebDAV extension
  • [fix] Fixed showing libraries with same name in WebDAV extension
  • Add "clear" button in a library's trash
  • [fix] Improve small errors when upload files via Web interface

New in Seafile Server 3.1.6 (Oct 9, 2014)

  • [Fix] Fix bug in uploading >1GB files via Web
  • [Fix] Remove assert in Ccnet to avoid denial-of-service attack
  • Revert the work "access token generated by FileServer can only be used once" because this leads to several problems

New in Seafile Server 2.1.5 (Feb 24, 2014)

  • Add correct mime types for mp4 files when downloading
  • [fix] [Important] set correct file mode bit after uploading a file from web.
  • Show meaningful message instead of "auto merged by system" for file merges
  • Improve file history calculation for files which were renamed
  • WebDAV:
  • Return last modified time of files

New in Seafile Server 2.1.4 (Jan 23, 2014)

  • [fix] Fix file share link download issue on some browsers.
  • [wiki] Enable create index for wiki.
  • Hide email address in avatar.
  • Show "create library" button on Organization page.
  • [fix] Further improve markdown filter to avoid XSS attack.

New in Seafile Server 2.1.3 (Jan 13, 2014)

  • [api] Add more web APIs
  • Incorporate Viewer.js to display opendocument formats
  • [fix] Add user email validation to avoid SQL injection
  • [fix] Only allow , , and a few other html elements in markdown to avoid XSS attack.
  • Return sub-libraries to the client when the feature is enabled.

New in Seafile Server 2.1.2 Beta (Jan 8, 2014)

  • Fixed a bug in the update script