Normale weergave

Bitfocus Companion v4.2.4

Door: Julusian
7 Februari 2026 om 23:15

📦 Downloads available at

💵 Donate to the project at

Companion v4.2.4 - Release Notes

🐞 BUG FIXES

  • support corsair galleon k100 sd
  • add SENTRY_DISABLE env var to disable sentry integration
  • fix: unable to clear local variable name
  • fix: reduce monaco suggest-details line-spacing (#3948)
  • fix: improve presentation of missing values in dropdowns
  • fix: surface table stretching
  • fix: 'internal: User Value' feedback field order refinement
  • fix: added TMPDIR to preserved env vars list (#3929)
  • fix: attempt to suppress mirabox stream dock error flood
  • fix: disable sentry http session tracking

Full Changelog: v4.2.3...v4.2.4

  •  

Part-DB 2.6.0

Door: jbtronics
7 Februari 2026 om 19:39

Part-DB 2.6.0

Tip

If you like Part-DB, consider donating to support the development. Press the sponsor button on the main github page, for more info.

Important

If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

New features

  • Experimental update manager, to update Part-DB from the web interface (thanks to @Sebbeben, PR #1217)
  • Added Conrad info provider
  • Added a generic info provider, to retrieve basic part infos from many shop URLs
  • Allow BOM import via SPNs (thanks @MayNiklas, PR #1209)
  • Highlight scanned part lot when scanning a barcode (#968)

Miscellaneous

  • Updated dependencies

New Contributors

Full Changelog: v2.5.1...v2.6.0

  •  

v11.15.1

6 Februari 2026 om 21:04

🐛 Bug Fixes & Optimizations

📦 Published Versions

  • @directus/app@15.1.1
  • @directus/api@33.1.1
  • @directus/composables@11.2.11
  • create-directus-extension@11.0.27
  • @directus/env@5.5.1
  • @directus/extensions-sdk@17.0.7

  •  

MariaDB 11.8.6, 11.4.10, 10.11.16 and 10.6.25 now available

6 Februari 2026 om 12:20

The MariaDB Foundation is pleased to announce the availability of MariaDB 11.8.6, MariaDB 11.4.10, MariaDB 10.11.16 and MariaDB 10.6.25, the latest stable releases in their respective long-term series (receiving regular maintenance and support for three years from their first stable release dates, and critical security fixes as source code releases for two additional years beyond). …

Continue reading \"MariaDB 11.8.6, 11.4.10, 10.11.16 and 10.6.25 now available\"

The post MariaDB 11.8.6, 11.4.10, 10.11.16 and 10.6.25 now available appeared first on MariaDB.org.

  •  

v0.15.4

Door: mdecimus
19 Januari 2026 om 13:59

[0.15.4] - 2026-01-19

If you are upgrading from v0.14.x and below, this version includes multiple breaking changes. Please read the upgrading documentation for more information on how to upgrade from previous versions.
If you are upgrading from v0.15.x, replace the binary and update the webadmin.

Added

  • IMAP: Map HEADER SUBJECT/FROM/TO searches to SUBJECT/FROM/TO queries.
  • Sieve: Update spam status on user scripts.

Changed

Fixed

  • Search: Return all document ids when no filters are provided.
  • Search: Filters not applied when a single message is in the account.
  • IMAP: Return ALREADYEXISTS code when creating existing mailboxes.
  • IMAP: Do not return quota resources if no quota is set.
  • JMAP/changes: Update newState with last changeId if an invalid fromChangeId is provided.
  • JMAP/CalendarIdentity: Do not update invalid calendar identities.
  • AI API: Include request error details if available.

Check binary attestation at here

  •  

v0.15.3

Door: mdecimus
29 December 2025 om 16:43

[0.15.3] - 2025-12-29

If you are upgrading from v0.14.x and below, this version includes multiple breaking changes. Please read the upgrading documentation for more information on how to upgrade from previous versions.
If you are upgrading from v0.15.x, replace the binary and update the webadmin.

Added

  • Polish locale support (contributed by @mrxkp) (#2480)

Changed

Fixed

  • Meilisearch: Return correct error messages when failing to create indexes (#2574)
  • PostgreSQL search: Truncate emails to 650kb for full-text search indexing.
  • FoundationDB search: Batch large transactions (#2567).
  • Spam filter: Fix training sample size checks
  • IMAP: Fix UTF7 encoding with Emojis (contributed by @dojiong) (#2564).

Check binary attestation at here

  •  

v0.15.2

Door: mdecimus
22 December 2025 om 14:20

[0.15.2] - 2025-12-22

If you are upgrading from v0.14.x and below, this version includes multiple breaking changes. Please read the upgrading documentation for more information on how to upgrade from previous versions.
If you are upgrading from v0.15.x, replace the binary and update the webadmin.

Added

  • OAuth: Add device authorization endpoint (#2225).

Changed

  • Antispam: Only auto-learn spam from traps or multiple RBL hits.

Fixed

  • mySQL search: Use MEDIUMTEXT field type for email body and attachments (#2544).
  • PostgreSQL search: Truncate large text fields.
  • ElasticSearch: Implement pagination (#2551).
  • Antispam: Fix NO_SPACE_IN_FROM spam tag detection logic (#2372).
  • IMAP: Fix shared folder double nesting (test suite credits to @ochnygosch) (#2358).
  • JMAP: Use latest Received header in JMAP Email/import (credits to @apexskier) (#2374).
  • JMAP: Return unsorted search results when the index is not ready (#2544).
  • LDAP: Lowercase attribute comparison (credits to @pdf) (#2363).
  • CLI: Fix same-host JMAP redirection on non-standard ports (#2271).

Check binary attestation at here

  •  

v0.15.1

Door: mdecimus
17 December 2025 om 18:10

[0.15.1] - 2025-12-17

This version includes multiple breaking changes. Please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

Changed

Fixed

  • PostgreSQL: Sanitize search index values (#2533)
  • Elasticsearch: Ignore resource_already_exists_exception errors when creating indexes (#2535)
  • Migrate 0.13.x data (#2534)

Check binary attestation at here

  •  

v0.15.0

Door: mdecimus
16 December 2025 om 17:40

[0.15.0] - 2025-12-16

This version includes multiple breaking changes. Please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

  • Linear spam classifier using FTRL-Proximal and feature/cuckoo hashing.
  • Meilisearch store backend implementation (#1482).
  • PostgreSQL and mySQL native full-text search support.
  • Multiple performance improvements and database access optimizations.
  • Encryption-at-rest: Spam training privacy setting.
  • Enterprise: Undelete e-mail feature now includes From/Subject/Received information.
  • IMAP: Implemented new keywords and mailbox attributes described in draft-ietf-mailmaint-messageflag-mailboxattribute-13

Changed

  • IMAP: Always return special use flags in responses.

Fixed

  • JMAP: FileNode/set fails to delete files (#2485).
  • JMAP: Return error when using blobId in JSContact and JSCalendar (#2431).
  • Directory: Deletion of list or domain issues (#2415).
  • MTA: Headers and body stripped from mail delivery subsystem failure notifications (#2344).
  • MTA: Hooks only run if sieve script, milter or rewrite is configured (#2317).
  • Autodiscover: Endpoint should be case insensitive (#2440).
  • Housekeeper: Panic during DST transition (#2366).
  • Import/Export: Fix import/export utility (#1882).
  • Enterprise: Remove tenant admin permissions when license is invalid.

Check binary attestation at here

  •  

v0.14.1

Door: mdecimus
28 Oktober 2025 om 11:49

[0.14.1] - 2025-10-28

If you are upgrading from v0.13.4 and below, this version includes breaking changes to the internal directory, calendar and contacts. Please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

  • Autoconfig for CalDAV, CardDAV and WebDAV (#1937)

Changed

  • HTTP: Remove HTTP STS preload directive.

Fixed

  • Directory: Keep OTP Auth and AppPasswords unless the remote directory provides new ones (#2319)
  • JMAP: Fix ContactCard/set and CalendarEvent/set destroy methods (#2308).

Check binary attestation at here

  •  

v0.14.0

Door: mdecimus
28 Oktober 2025 om 09:57

[0.14.0] - 2025-10-22

If you are upgrading from v0.13.4 and below, this version includes breaking changes to the internal directory, calendar and contacts. Please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

Changed

  • Breaking Database Changes (migrated automatically on first start):
    • Internal directory schema changed.
    • Calendar and Contacts storage schema changed.
    • Sieve scripts storage schema changed.
    • Push Subscriptions storage schema changed.
  • Replaced sieve.untrusted.limits.max-scripts and jmap.push.max-total with object-quota.* settings.
  • Cluster node roles now allow sharding.

Fixed

  • Push Subscription: Clean-up of expired subscriptions and cluster notification of changes (#1248)
  • CalDAV: Per-user CalDAV properties (#2058)

Check binary attestation at here

  •  

v0.13.4

Door: mdecimus
1 Oktober 2025 om 07:59

[0.13.4] - 2025-09-30

If you are upgrading from v0.11.x or v0.12.x, this version includes breaking changes to the message queue and MTA configuration. Please read the UPGRADING.md file for more information on how to upgrade from previous versions.

Added

Changed

  • JMAP: Protocol layer rewrite for zero-copy deserialization and architectural improvements.

Fixed

  • IMAP: Unbounded memory allocation in request parser (CVE-2025-61600 ).
  • IMAP: Wrong permission checked for GETACL.
  • JMAP: References to previous method fail when there are no results (#1507).
  • JMAP: Enforce quota checks on Blob/copy.
  • JMAP: Mailbox/get fails without accountId argument (#1936).
  • JMAP: Do not return invalidProperties when email update doesn't contain changes (#1139)
  • iTIP: Include date properties in REPLY (#2102).
  • OIDC: Do not set username field if it is the same as the email field.
  • Telemetry: Fix calculateMetrics housekeeper task (#2155).
  • Directory: Always use rsplit to extract the domain part from email addresses.

Check binary attestation at here

  •  

v0.13.3

Door: mdecimus
10 September 2025 om 11:01

[0.13.3] - 2025-09-10

If you are upgrading from v0.11.x or v0.12.x, this version includes breaking changes to the message queue and MTA configuration. Please read the UPGRADING.md file for more information on how to upgrade from previous versions.

Added

Changed

  • WebDAV: Assisted discovery v2

Fixed

  • iTIP: Do not send a REPLY when deleting an event that was not accepted.
  • iTIP: Include event details in REPLY messages (#2102).
  • iTIP: Add organizer to iMIP replies if missing to deal with MS Exchange 2010 bug.
  • OIDC: Do not overwrite locally defined aliases (#2065).
  • HTTP: Scan ban should only be triggered by HTTP parse errors.
  • HTTP: Skip scanner fail2ban checks when the proxy client IP can't be parsed (#2121).
  • JMAP: Do not allow roles to be removed from system mailboxes (#1977).
  • JMAP WS: Fix panic when using invalid server url.
  • SMTP: Do no send EHLO twice when STARTTLS is unavailable (#2050).
  • IMAP: Allow ENABLE UTF8 in IMAPrev1.
  • IMAP: Include administer permission in ACL responses.
  • IMAP: Add owner rights to ACL get responses.
  • IMAP: Do not auto-train Bayes when moving messages from Junk to Trash.
  • IMAP/ManageSieve: Increase maximum quoted argument size (#2039).
  • CalDAV: Limit recurrence expansions in calendar reports (CVE-2025-59045).
  • WebDAV: Do not fix percent encoding on WebDAV FS (#2036).

Check binary attestation at here

  •  

v0.13.2

Door: mdecimus
28 Juli 2025 om 14:35

[0.13.2] - 2025-07-28

If you are upgrading from v0.11.x or v0.12.x, this version includes breaking changes to the message queue and MTA configuration. Please read the UPGRADING.md file for more information on how to upgrade from previous versions.

Added

  • ACME: DeSEC cloud DNS provider support (contributed by @Tyr3al).
  • ACME: OVH cloud DNS provider support (contributed by @srachner).
  • CalDAV Scheduling: Catalan language support (contributed by @jolupa) (#1873).
  • MTA: Allow to send e-mails as group, while member of that group (#485).
  • OIDC: Allow local access tokens to be used with third-party OIDC backends (#1311 stalwartlabs/webadmin#52).

Changed

  • IMAP: Return OK when moving/copying non-existent messages (#670).
  • IMAP: Copy flags when copying/moving messages between accounts.

Fixed

  • MTA: Do not convert e-mail local parts to lowercase (#1916).
  • Sieve: fileinto should override spam filter (#1917).
  • JMAP: Incorrect accountId used in email set and import methods (#1777).
  • WebDAV: Always return MULTISTATUS when calendar-query yields no results.
  • LDAP: Only set account name if not returned in LDAP query (#1471).
  • Enterprise: Invalidate logo cache when changes are made (#1856).
  • Enterprise: Fix tenant quota update API.

Check binary attestation at here

  •  

OBS Studio 32.1.0 Release Candidate 1

6 Februari 2026 om 01:48

Release Candidate 1 Changes

  • Removed new Add Source dialog [Warchamp7]
    • The Add Source dialog was deemed not ready for this release.
  • Fixed an issue in Beta 2 where an Image Slideshow could have its transition interrupted [Warchamp7]
  • Fixed an issue in Beta 1-2 where some strings were not translated [shiina424]
  • Fixed an issue in Beta 1-2 where full-height docks did not have the correct default setting [Warchamp7]
  • Fixed an issue in Beta 1-2 where the Audio Mixer menu would not be correct [Warchamp7]
  • Fixed an issue in Beta 1-2 where the Audio Mixer would not show the correct monitoring state [Warchamp7]
  • Fixed an issue in Beta 1-2 where Previewed sources weren't shown/hidden on enabling/disabling studio mode [Penwy]
  • Fixed an issue in Beta 1-2 where Previewed sources weren't added/removed to the mixer when adding/removing to the previewed scene [Penwy]
  • Fixed an issue in Beta 1-2 where changing the Peak Meter type would not be reflected correctly in the UI [Warchamp7]
  • Fixed an issue in Beta 1-2 where the Audio Mixer used more resources on macOS than previously [Warchamp7]
  • Fixed an issue in Beta 1-2 where the Audio Mixer did not use the correct colors for muted audio sources [Warchamp7]
  • Fixed an issue in Beta 1-2 where the rename dialog for the Audio Mixer and Transitions would unnecessarily ask for confirmation when closing without making changes [Warchamp7]
  • Fixed an issue in Beta 1-2 where visibility of items in the Audio Mixer could be incorrect [Warchamp7]
  • Fixed an issue in Beta 1-2 where the monitoring icon in the Audio Mixer would not update correctly [shiina424]
  • Fixed an issue in Beta 1-2 where some icons in the Audio Mixer were missing or not styled correctly [shiina424/Warchamp7]
  • Fixed an issue where PipeWire Camera framerates listed could be incorrect [tytan652]
  • Fixed an issue where HDR video playback in Media Source could be darker than expected [xtfo]
  • Fixed an issue on macOS where OBS Studio could crash on application shutdown if YouTube docks were active [PatTheMav]

Beta 2 Changes

  • Fixed an issue in Beta 1 causing buttons in the Audio Mixer to no longer display when changing font size [Warchamp7]
  • Fixed an issue in Beta 1 where some tooltips were missing from the Audio Mixer [Warchamp7]
  • Fixed an issue in Beta 1 where the dialogs spawned from the Audio Mixer on the Classic theme would be sized incorrectly [Warchamp7]
  • Fixed an issue in Beta 1 where changing themes would sometimes not update the Audio Mixer appearance [Warchamp7]
  • Fixed an issue in Beta 1 where the resolution and aspect ratio could be missing from the Video Format description for PipeWire Camera sources [pobrn]
  • Fixed an issue that could cause OBS to become unable to change profiles or video settings [exeldro]
  • Fixed an issue that could cause transitions to become locked [Warchamp7]

32.1 New Features

  • Added new Audio Mixer [Warchamp7]
  • Added new Add Source dialog [Warchamp7]
  • Added WebRTC Simulcast Support [Sean-Der]
  • Added missing undo/redo actions for scene items [cg2121]
    • Scale filtering, blending mode, blending method, deinterlacing mode and deinterlacing field order

32.1 Changes

  • Improved security of browser sources using local files [Warchamp7]
  • Removed "Source" from source names [Warchamp7]
  • Updated the Edit Transform dialog [Warchamp7]
  • Changed copying a scene item to copy all properties [cg2121/Warchamp7]
  • Disabled dock animations [Warchamp7]
  • Moved transition preview button to button box [exeldro]
  • Rearranged default dock positions [Warchamp7]
  • Increased media source playback slider update rate [Warchamp7]
  • Enabled palette for Light theme audio mixer [Warchamp7]
  • Changed default bitrates to 6000 kbps [mihawk90]

32.1 Bug Fixes

  • Fixed an issue where projector resolutions had decimals [Warchamp7]
  • Fixed sync of Preview/Program size and positioning [Warchamp7]
  • Refactored OBSBasic::Save to only save frontend canvas scenes/groups [dsaedtler]
  • Fixed NAL type for HEVC caption/BPM SEIs [dsaedtler]
  • Fixed an issue where video scaling could be incorrect in multivideo encoder scenarios [dsaedtler]
  • Fixed an issue with chapter markers having incorrect time when using file splitting [garyholmes]
  • Fixed an issue where some recordings could have black thumbnails [derrod]
  • Fixed an issue where the NVIDIA Blur and Background Blur could have banding or look splotchy [pkviet]
  • Fixed an issue where macOS Screen Capture would select an item for capture by default [jcm93]
  • Fixed an issue with PipeWire when capturing a device that does not require a framerate [tytan652]

Checksums

OBS-Studio-32.1.0-rc1-Sources.tar.gz: 17b44f973a0e98c4c322c2aca10d8b662c19fbbe50879c30ac805b0702e827dd
OBS-Studio-32.1.0-rc1-Ubuntu-24.04-x86_64-dbsym.ddeb: b65518cfda519d30217a432117c46e0ca89eedfa69fe38e8a2ce6b579b3da0ee
OBS-Studio-32.1.0-rc1-Ubuntu-24.04-x86_64.deb: 30ba97ae4686e1581f4c13db16de1881ab5ee1263cd32423597ff4d928258a82
OBS-Studio-32.1.0-rc1-Windows-arm64-PDBs.zip: 41bafd1870f707fc30462e48adcbffc154955775499f45331ac744e4e480cb61
OBS-Studio-32.1.0-rc1-Windows-arm64.zip: 0e34115c817b972b3df7a76db5f1451bc6c534f66ceae334c0a48230768260ad
OBS-Studio-32.1.0-rc1-Windows-x64-Installer.exe: 4160354cb8c3a38fdaad1b82909918321ef9e4fb733de5659a96d87e3750836e
OBS-Studio-32.1.0-rc1-Windows-x64-PDBs.zip: 5954283574169c2a6685b69cf4831d32b6c18b9c7f7a22fb3c7fe14e6a44b5b1
OBS-Studio-32.1.0-rc1-Windows-x64.zip: ca0a529ecd59f1e19df12b12bdae2ce4930369ec73ede9b5d9ac82fe9690c685
OBS-Studio-32.1.0-rc1-macOS-Apple-dSYMs.tar.xz: 722d7cdb170a368193830309281f2fb157ec42bea01397e1a0c47d2f132c9e28
OBS-Studio-32.1.0-rc1-macOS-Apple.dmg: e9c6b844d5ed0d3b6bc849bc6bc8ac512022854e29b7d9a6cbc1bc3f31f36a96
OBS-Studio-32.1.0-rc1-macOS-Intel-dSYMs.tar.xz: dd1d9f62b2e05b04302cdee64ac01a6f242fabd38dab6ace2cf1dcd9ff663307
OBS-Studio-32.1.0-rc1-macOS-Intel.dmg: d06d0798324c7960fede58683a9f6fc5ec1d8c4602d3cd042667231f3e67c1bc

  •  

v11.15.0

19 Februari 2026 om 21:17

⚠️ Potential Breaking Changes

Attached prompts, content items, and visual editor elements to AI Assistant Context (#26512 by @bryantgillespie)
To use this feature, update @directus/visual-editing to v1.2.0+ on your website.

Disabled interfaces are not interactive anymore, which includes opening disabled read-only fields in a drawer (#26470 by @formfcw)

✨ New Features & Improvements

  • @directus/app
    • Added deployment module for triggering deployments from Directus with Vercel as first supported provider (#26473 by @gaetansenn)
    • Added collaborative editing (#26172 by @Nitwel)
    • Attached prompts, content items, and visual editor elements to AI Assistant Context (#26512 by @bryantgillespie)
    • Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new @directus/ai package. (#26481 by @bryantgillespie)
    • Added toggle to allow comparing revision to previous revision (#26480 by @robluton)
    • Added relational field support on x-axis of bar chart (#26489 by @JamesW1)
    • Added visual editing support to the live preview split pane, including display options menu, full-width mode with drag-to-expand, and quick access to the Visual Editor module. (#26463 by @bryantgillespie)
    • Changed permission-blocked fields from disabled to non-editable appearance (#26572 by @HZooly)
  • @directus/api
    • Added deployment module for triggering deployments from Directus with Vercel as first supported provider (#26473 by @gaetansenn)
    • Added collaborative editing (#26172 by @Nitwel)
    • Attached prompts, content items, and visual editor elements to AI Assistant Context (#26512 by @bryantgillespie)
    • Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new @directus/ai package. (#26481 by @bryantgillespie)
  • @directus/sdk
    • Fixed race condition and allow accessing the connected state (#26511 by @Nitwel)
    • Added deployment module for triggering deployments from Directus with Vercel as first supported provider (#26473 by @gaetansenn)
  • @directus/system-data
    • Added deployment module for triggering deployments from Directus with Vercel as first supported provider (#26473 by @gaetansenn)
  • @directus/types
    • Added deployment module for triggering deployments from Directus with Vercel as first supported provider (#26473 by @gaetansenn)
    • Added collaborative editing (#26172 by @Nitwel)
    • Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new @directus/ai package. (#26481 by @bryantgillespie)
  • @directus/errors
    • Added deployment module for triggering deployments from Directus with Vercel as first supported provider (#26473 by @gaetansenn)
  • @directus/env
    • Added deployment module for triggering deployments from Directus with Vercel as first supported provider (#26473 by @gaetansenn)
    • Added collaborative editing (#26172 by @Nitwel)
  • @directus/utils
  • @directus/ai
    • Attached prompts, content items, and visual editor elements to AI Assistant Context (#26512 by @bryantgillespie)
    • Added multi-provider AI support with Google and OpenAI-compatible providers. Extracted shared AI types into new @directus/ai package. (#26481 by @bryantgillespie)
  • @directus/memory

🐛 Bug Fixes & Optimizations

  • @directus/app
  • @directus/api
    • Improved error message for system field updates that are not schema.is_indexed (#26548 by @JamesW1)
    • Replaced deprecated ldapjs with ldapts (#26363 by @dstockton)
    • Changed users.last_access display mode to absolute (#26548 by @JamesW1)
  • @directus/system-data
  • @directus/env
  • @directus/memory
    • Handled empty buffers to prevent errors during race conditions or disconnects (#26172 by @Nitwel)

📦 Published Versions

  • @directus/app@15.1.0
  • @directus/api@33.1.0
  • @directus/ai@1.1.0
  • @directus/composables@11.2.10
  • create-directus-extension@11.0.26
  • @directus/env@5.5.0
  • @directus/errors@2.2.0
  • @directus/extensions@3.0.17
  • @directus/extensions-registry@3.0.17
  • @directus/extensions-sdk@17.0.6
  • @directus/memory@3.1.0
  • @directus/pressure@3.0.15
  • @directus/schema-builder@0.0.12
  • @directus/storage-driver-azure@12.0.15
  • @directus/storage-driver-cloudinary@12.0.15
  • @directus/storage-driver-gcs@12.0.15
  • @directus/storage-driver-s3@12.1.1
  • @directus/storage-driver-supabase@3.0.15
  • @directus/system-data@4.1.0
  • @directus/themes@1.2.2
  • @directus/types@14.1.0
  • @directus/utils@13.2.0
  • @directus/validation@2.0.15
  • @directus/sdk@21.1.0

  •  

Asterisk Release 23.2.2

5 Februari 2026 om 17:58

The Asterisk Development Team would like to announce security release
Asterisk 23.2.2.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/23.2.2
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 23.2.2

Change Log for Release asterisk-23.2.2

Links:

Summary:

  • Commits: 4
  • Commit Authors: 2
  • Issues Resolved: 0
  • Security Advisories Resolved: 4
    • GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
    • GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
    • GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
    • GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

User Notes:

  • ast_coredumper: check ast_debug_tools.conf permissions

    ast_debug_tools.conf must be owned by root and not be
    writable by other users or groups to be used by ast_coredumper or
    by ast_logescalator or ast_loggrabber when run as root.

Upgrade Notes:

  • http.c: Change httpstatus to default disabled and sanitize output.

    To prevent possible security issues, the /httpstatus page
    served by the internal web server is now disabled by default. To explicitly
    enable it, set enable_status=yes in http.conf.

Developer Notes:

Commit Authors:

  • George Joseph: (2)
  • Mike Bradeen: (2)

Issue and Commit Detail:

Closed Issues:

  • !GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
  • !GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
  • !GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
  • !GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

Commits By Author:

  • George Joseph (2):

  • Mike Bradeen (2):

Commit List:

  • xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.
  • ast_coredumper: check ast_debug_tools.conf permissions
  • http.c: Change httpstatus to default disabled and sanitize output.
  • ast_coredumper: create gdbinit file with restrictive permissions

Commit Details:

xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.

Author: George Joseph
Date: 2026-01-15

The xmlReadFile XML_PARSE_NOENT flag, which allows parsing of external
entities, could allow a potential XXE injection attack. Replacing it with
XML_PARSE_NONET, which prevents network access, is safer.

Resolves: #GHSA-85x7-54wr-vh42

ast_coredumper: check ast_debug_tools.conf permissions

Author: Mike Bradeen
Date: 2026-01-15

Prevent ast_coredumper from using ast_debug_tools.conf files that are
not owned by root or are writable by other users or groups.

Prevent ast_logescalator and ast_loggrabber from doing the same if
they are run as root.

Resolves: #GHSA-rvch-3jmx-3jf3

UserNote: ast_debug_tools.conf must be owned by root and not be
writable by other users or groups to be used by ast_coredumper or
by ast_logescalator or ast_loggrabber when run as root.

http.c: Change httpstatus to default disabled and sanitize output.

Author: George Joseph
Date: 2026-01-15

To address potential security issues, the httpstatus page is now disabled
by default and the echoed query string and cookie output is html-escaped.

Resolves: #GHSA-v6hp-wh3r-cwxh

UpgradeNote: To prevent possible security issues, the /httpstatus page
served by the internal web server is now disabled by default. To explicitly
enable it, set enable_status=yes in http.conf.

ast_coredumper: create gdbinit file with restrictive permissions

Author: Mike Bradeen
Date: 2026-01-15

Modify gdbinit to use the install command with explicit permissions (-m 600)
when creating the .ast_coredumper.gdbinit file. This ensures the file is
created with restricted permissions (readable/writable only by the owner)
to avoid potential privilege escalation.

Resolves: #GHSA-xpc6-x892-v83c

  •  

Asterisk Release 21.12.1

5 Februari 2026 om 17:54

The Asterisk Development Team would like to announce security release
Asterisk 21.12.1.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/21.12.1
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 21.12.1

Change Log for Release asterisk-21.12.1

Links:

Summary:

  • Commits: 4
  • Commit Authors: 2
  • Issues Resolved: 0
  • Security Advisories Resolved: 4
    • GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
    • GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
    • GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
    • GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

User Notes:

  • ast_coredumper: check ast_debug_tools.conf permissions

    ast_debug_tools.conf must be owned by root and not be
    writable by other users or groups to be used by ast_coredumper or
    by ast_logescalator or ast_loggrabber when run as root.

Upgrade Notes:

  • http.c: Change httpstatus to default disabled and sanitize output.

    To prevent possible security issues, the /httpstatus page
    served by the internal web server is now disabled by default. To explicitly
    enable it, set enable_status=yes in http.conf.

Developer Notes:

Commit Authors:

  • George Joseph: (2)
  • Mike Bradeen: (2)

Issue and Commit Detail:

Closed Issues:

  • !GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
  • !GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
  • !GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
  • !GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

Commits By Author:

  • George Joseph (2):

  • Mike Bradeen (2):

Commit List:

  • xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.
  • ast_coredumper: check ast_debug_tools.conf permissions
  • http.c: Change httpstatus to default disabled and sanitize output.
  • ast_coredumper: create gdbinit file with restrictive permissions

Commit Details:

xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.

Author: George Joseph
Date: 2026-01-15

The xmlReadFile XML_PARSE_NOENT flag, which allows parsing of external
entities, could allow a potential XXE injection attack. Replacing it with
XML_PARSE_NONET, which prevents network access, is safer.

Resolves: #GHSA-85x7-54wr-vh42

ast_coredumper: check ast_debug_tools.conf permissions

Author: Mike Bradeen
Date: 2026-01-15

Prevent ast_coredumper from using ast_debug_tools.conf files that are
not owned by root or are writable by other users or groups.

Prevent ast_logescalator and ast_loggrabber from doing the same if
they are run as root.

Resolves: #GHSA-rvch-3jmx-3jf3

UserNote: ast_debug_tools.conf must be owned by root and not be
writable by other users or groups to be used by ast_coredumper or
by ast_logescalator or ast_loggrabber when run as root.

http.c: Change httpstatus to default disabled and sanitize output.

Author: George Joseph
Date: 2026-01-15

To address potential security issues, the httpstatus page is now disabled
by default and the echoed query string and cookie output is html-escaped.

Resolves: #GHSA-v6hp-wh3r-cwxh

UpgradeNote: To prevent possible security issues, the /httpstatus page
served by the internal web server is now disabled by default. To explicitly
enable it, set enable_status=yes in http.conf.

ast_coredumper: create gdbinit file with restrictive permissions

Author: Mike Bradeen
Date: 2026-01-15

Modify gdbinit to use the install command with explicit permissions (-m 600)
when creating the .ast_coredumper.gdbinit file. This ensures the file is
created with restricted permissions (readable/writable only by the owner)
to avoid potential privilege escalation.

Resolves: #GHSA-xpc6-x892-v83c

  •  

Asterisk Release 22.8.2

5 Februari 2026 om 17:51

The Asterisk Development Team would like to announce security release
Asterisk 22.8.2.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/22.8.2
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 22.8.2

Change Log for Release asterisk-22.8.2

Links:

Summary:

  • Commits: 4
  • Commit Authors: 2
  • Issues Resolved: 0
  • Security Advisories Resolved: 4
    • GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
    • GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
    • GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
    • GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

User Notes:

  • ast_coredumper: check ast_debug_tools.conf permissions

    ast_debug_tools.conf must be owned by root and not be
    writable by other users or groups to be used by ast_coredumper or
    by ast_logescalator or ast_loggrabber when run as root.

Upgrade Notes:

  • http.c: Change httpstatus to default disabled and sanitize output.

    To prevent possible security issues, the /httpstatus page
    served by the internal web server is now disabled by default. To explicitly
    enable it, set enable_status=yes in http.conf.

Developer Notes:

Commit Authors:

  • George Joseph: (2)
  • Mike Bradeen: (2)

Issue and Commit Detail:

Closed Issues:

  • !GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
  • !GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
  • !GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
  • !GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

Commits By Author:

  • George Joseph (2):

  • Mike Bradeen (2):

Commit List:

  • xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.
  • ast_coredumper: check ast_debug_tools.conf permissions
  • http.c: Change httpstatus to default disabled and sanitize output.
  • ast_coredumper: create gdbinit file with restrictive permissions

Commit Details:

xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.

Author: George Joseph
Date: 2026-01-15

The xmlReadFile XML_PARSE_NOENT flag, which allows parsing of external
entities, could allow a potential XXE injection attack. Replacing it with
XML_PARSE_NONET, which prevents network access, is safer.

Resolves: #GHSA-85x7-54wr-vh42

ast_coredumper: check ast_debug_tools.conf permissions

Author: Mike Bradeen
Date: 2026-01-15

Prevent ast_coredumper from using ast_debug_tools.conf files that are
not owned by root or are writable by other users or groups.

Prevent ast_logescalator and ast_loggrabber from doing the same if
they are run as root.

Resolves: #GHSA-rvch-3jmx-3jf3

UserNote: ast_debug_tools.conf must be owned by root and not be
writable by other users or groups to be used by ast_coredumper or
by ast_logescalator or ast_loggrabber when run as root.

http.c: Change httpstatus to default disabled and sanitize output.

Author: George Joseph
Date: 2026-01-15

To address potential security issues, the httpstatus page is now disabled
by default and the echoed query string and cookie output is html-escaped.

Resolves: #GHSA-v6hp-wh3r-cwxh

UpgradeNote: To prevent possible security issues, the /httpstatus page
served by the internal web server is now disabled by default. To explicitly
enable it, set enable_status=yes in http.conf.

ast_coredumper: create gdbinit file with restrictive permissions

Author: Mike Bradeen
Date: 2026-01-15

Modify gdbinit to use the install command with explicit permissions (-m 600)
when creating the .ast_coredumper.gdbinit file. This ensures the file is
created with restricted permissions (readable/writable only by the owner)
to avoid potential privilege escalation.

Resolves: #GHSA-xpc6-x892-v83c

  •  

Asterisk Release 20.18.2

5 Februari 2026 om 17:48

The Asterisk Development Team would like to announce security release
Asterisk 20.18.2.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/20.18.2
and
https://downloads.asterisk.org/pub/telephony/asterisk

Repository: https://github.com/asterisk/asterisk
Tag: 20.18.2

Change Log for Release asterisk-20.18.2

Links:

Summary:

  • Commits: 4
  • Commit Authors: 2
  • Issues Resolved: 0
  • Security Advisories Resolved: 4
    • GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
    • GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
    • GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
    • GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

User Notes:

  • ast_coredumper: check ast_debug_tools.conf permissions

    ast_debug_tools.conf must be owned by root and not be
    writable by other users or groups to be used by ast_coredumper or
    by ast_logescalator or ast_loggrabber when run as root.

Upgrade Notes:

  • http.c: Change httpstatus to default disabled and sanitize output.

    To prevent possible security issues, the /httpstatus page
    served by the internal web server is now disabled by default. To explicitly
    enable it, set enable_status=yes in http.conf.

Developer Notes:

Commit Authors:

  • George Joseph: (2)
  • Mike Bradeen: (2)

Issue and Commit Detail:

Closed Issues:

  • !GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
  • !GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
  • !GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
  • !GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

Commits By Author:

  • George Joseph (2):

  • Mike Bradeen (2):

Commit List:

  • xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.
  • ast_coredumper: check ast_debug_tools.conf permissions
  • http.c: Change httpstatus to default disabled and sanitize output.
  • ast_coredumper: create gdbinit file with restrictive permissions

Commit Details:

xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.

Author: George Joseph
Date: 2026-01-15

The xmlReadFile XML_PARSE_NOENT flag, which allows parsing of external
entities, could allow a potential XXE injection attack. Replacing it with
XML_PARSE_NONET, which prevents network access, is safer.

Resolves: #GHSA-85x7-54wr-vh42

ast_coredumper: check ast_debug_tools.conf permissions

Author: Mike Bradeen
Date: 2026-01-15

Prevent ast_coredumper from using ast_debug_tools.conf files that are
not owned by root or are writable by other users or groups.

Prevent ast_logescalator and ast_loggrabber from doing the same if
they are run as root.

Resolves: #GHSA-rvch-3jmx-3jf3

UserNote: ast_debug_tools.conf must be owned by root and not be
writable by other users or groups to be used by ast_coredumper or
by ast_logescalator or ast_loggrabber when run as root.

http.c: Change httpstatus to default disabled and sanitize output.

Author: George Joseph
Date: 2026-01-15

To address potential security issues, the httpstatus page is now disabled
by default and the echoed query string and cookie output is html-escaped.

Resolves: #GHSA-v6hp-wh3r-cwxh

UpgradeNote: To prevent possible security issues, the /httpstatus page
served by the internal web server is now disabled by default. To explicitly
enable it, set enable_status=yes in http.conf.

ast_coredumper: create gdbinit file with restrictive permissions

Author: Mike Bradeen
Date: 2026-01-15

Modify gdbinit to use the install command with explicit permissions (-m 600)
when creating the .ast_coredumper.gdbinit file. This ensures the file is
created with restricted permissions (readable/writable only by the owner)
to avoid potential privilege escalation.

Resolves: #GHSA-xpc6-x892-v83c

  •  

Asterisk Release certified-20.7-cert9

5 Februari 2026 om 17:45

The Asterisk Development Team would like to announce security release
Certified Asterisk 20.7-cert9.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert9
and
https://downloads.asterisk.org/pub/telephony/certified-asterisk

Repository: https://github.com/asterisk/asterisk
Tag: certified-20.7-cert9

Change Log for Release asterisk-certified-20.7-cert9

Links:

Summary:

  • Commits: 4
  • Commit Authors: 2
  • Issues Resolved: 0
  • Security Advisories Resolved: 4
    • GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
    • GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
    • GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
    • GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

User Notes:

  • ast_coredumper: check ast_debug_tools.conf permissions

    ast_debug_tools.conf must be owned by root and not be
    writable by other users or groups to be used by ast_coredumper or
    by ast_logescalator or ast_loggrabber when run as root.

Upgrade Notes:

  • http.c: Change httpstatus to default disabled and sanitize output.

    To prevent possible security issues, the /httpstatus page
    served by the internal web server is now disabled by default. To explicitly
    enable it, set enable_status=yes in http.conf.

Developer Notes:

Commit Authors:

  • George Joseph: (2)
  • Mike Bradeen: (2)

Issue and Commit Detail:

Closed Issues:

  • !GHSA-85x7-54wr-vh42: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
  • !GHSA-rvch-3jmx-3jf3: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
  • !GHSA-v6hp-wh3r-cwxh: The Asterisk embedded web server's /httpstatus page echos user supplied values(cookie and query string) without sanitization
  • !GHSA-xpc6-x892-v83c: ast_coredumper runs as root, and writes gdb init file to world writeable folder; leading to potential privilege escalation

Commits By Author:

  • George Joseph (2):

  • Mike Bradeen (2):

Commit List:

  • xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.
  • ast_coredumper: check ast_debug_tools.conf permissions
  • http.c: Change httpstatus to default disabled and sanitize output.
  • ast_coredumper: create gdbinit file with restrictive permissions

Commit Details:

xml.c: Replace XML_PARSE_NOENT with XML_PARSE_NONET for xmlReadFile.

Author: George Joseph
Date: 2026-01-15

The xmlReadFile XML_PARSE_NOENT flag, which allows parsing of external
entities, could allow a potential XXE injection attack. Replacing it with
XML_PARSE_NONET, which prevents network access, is safer.

Resolves: #GHSA-85x7-54wr-vh42

ast_coredumper: check ast_debug_tools.conf permissions

Author: Mike Bradeen
Date: 2026-01-15

Prevent ast_coredumper from using ast_debug_tools.conf files that are
not owned by root or are writable by other users or groups.

Prevent ast_logescalator and ast_loggrabber from doing the same if
they are run as root.

Resolves: #GHSA-rvch-3jmx-3jf3

UserNote: ast_debug_tools.conf must be owned by root and not be
writable by other users or groups to be used by ast_coredumper or
by ast_logescalator or ast_loggrabber when run as root.

http.c: Change httpstatus to default disabled and sanitize output.

Author: George Joseph
Date: 2026-01-15

To address potential security issues, the httpstatus page is now disabled
by default and the echoed query string and cookie output is html-escaped.

Resolves: #GHSA-v6hp-wh3r-cwxh

UpgradeNote: To prevent possible security issues, the /httpstatus page
served by the internal web server is now disabled by default. To explicitly
enable it, set enable_status=yes in http.conf.

ast_coredumper: create gdbinit file with restrictive permissions

Author: Mike Bradeen
Date: 2026-01-15

Modify gdbinit to use the install command with explicit permissions (-m 600)
when creating the .ast_coredumper.gdbinit file. This ensures the file is
created with restricted permissions (readable/writable only by the owner)
to avoid potential privilege escalation.

Resolves: #GHSA-xpc6-x892-v83c

  •  

Counter-Strike 2 Update

5 Februari 2026 om 00:33
[p]\[ MISC ][/p]
  • [p]Fixed a case where switching firstperson spectator targets would cause viewmodel animations to reset.[/p][/*]
  • [p]Fixed a case where physics calculations far from the origin were causing performance issues.[/p][/*]
[p][/p][p]\[ MAPS ][/p][p]Anubis[/p]
  • [p]Adjusted player clipping around new drop.[/p][/*]
  • [p]Adjusted grenade clipping around connector (e-box :P) hole and old drop.[/p][/*]
[p]Poseidon[/p]
  • [p]Updated to the latest version from the Community Workshop (Update Notes)[/p][/*]
  •  

Early Stable Update for Desktop

4 Februari 2026 om 19:15

 The Stable channel has been updated to 145.0.7632.45/.46 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log.

You can find more details about early Stable releases here.

Interested in switching release channels?  Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.


Srinivas Sista

Google Chrome


  •  
❌