Software-update: Firefly III 6.5.5
Firefly III is een in PHP geschreven webapplicatie waarmee een overzicht van je financiën kan worden bijgehouden. Het kan de data importeren vanuit csv-bestanden, de GoCardless-api of de Spectre-api. Voor meer informatie over dit programma verwijzen we naar deze pagina. De ontwikkelaar loopt ook op Tweakers rond en bespreekt zijn applicatie in het grote 'Firefly III'-topic. Sinds versie 6.5.0 zijn de volgende veranderingen en verbeteringen aangebracht:
AddedAdd the ability for Fosstodon posts to read a summary of the changelog.
Add the ability for Fosstodon posts to read a summary of the changelog.ChangedLots of code cleanup and small quality issues fixed.
Lots of code cleanup and small quality issues fixed.FixedIssue 11803 (Monthly Left budget not correct)Issue 11641 (Annual budget “Remaining” resets in subsequent months)Discussion 11879 (Searching for accounts should include inactive accounts?)Issue 11916 (Balance is not recalculated when multiple transactions are selected and then deleted)Discussion 11936 (Links in emails don't link to correct domain)Issue 11944 (Stale available_budgets rows prevent disabling a currency after switching default)
Issue 11803 (Monthly Left budget not correct)Issue 11641 (Annual budget “Remaining” resets in subsequent months)Discussion 11879 (Searching for accounts should include inactive accounts?)Issue 11916 (Balance is not recalculated when multiple transactions are selected and then deleted)Discussion 11936 (Links in emails don't link to correct domain)Issue 11944 (Stale available_budgets rows prevent disabling a currency after switching default)SecurityCredits go to Igor for finding some interesting issues in Firefly III. They have been fixed.
Credits go to Igor for finding some interesting issues in Firefly III. They have been fixed.AddedAdd some debug info to find problems with available budget calculations.
Add some debug info to find problems with available budget calculations.FixedIssue 11873 (Piggy bank +/- sometimes sends 0.00 and fails with “Cannot add 0 because canAddAmount returned false”)Transaction count would search for the wrong meta field.
Issue 11873 (Piggy bank +/- sometimes sends 0.00 and fails with “Cannot add 0 because canAddAmount returned false”)Transaction count would search for the wrong meta field.SecurityPublished security advisory GHSA-5q8v-j673-m5v4 found andIt's possible to submit webhook URLs that point to internal IP addresses. This will still be the case in the future, though some reserved ranges are now blocked. Let me know if this impacts you.
Published security advisory GHSA-5q8v-j673-m5v4 found andIt's possible to submit webhook URLs that point to internal IP addresses. This will still be the case in the future, though some reserved ranges are now blocked. Let me know if this impacts you.This release fixes some sloppy coding on my part, but good news everyone! A new linter is in place that should prevent that from happening. Turns out I had disabled it in the past :(.
AddedNote about the EU origins of Firefly III.
Note about the EU origins of Firefly III.ChangedPR 11862 (Return currency info for tag journals)Expand code linting and checks.
PR 11862 (Return currency info for tag journals)Expand code linting and checks.FixedIssue 11866 (ReflectionException on Transaction\ListRequest)
Issue 11866 (ReflectionException on Transaction\ListRequest)ChangedPR 11825 (Fix account transaction type filtering)PR 11833 (Convert to primary currency for category charts)PR 11835 (Convert to primary currency for tag charts)PR 11836 (Convert to primary currency for reportPeriodChart)PR 11837 (Convert to primary currency for transaction charts)
PR 11825 (Fix account transaction type filtering)PR 11833 (Convert to primary currency for category charts)PR 11835 (Convert to primary currency for tag charts)PR 11836 (Convert to primary currency for reportPeriodChart)PR 11837 (Convert to primary currency for transaction charts)FixedIssue 11812 (Using batch mode, some imported transactions aren't checked by rules)Issue 11814 (Budget : error with CRON after switch user range view)Issue 11829 (User overview in settings shows 500)Issue 11847 (Wrong attachment indicator when listing records by tags)Better check on renamed accounts
Issue 11812 (Using batch mode, some imported transactions aren't checked by rules)Issue 11814 (Budget : error with CRON after switch user range view)Issue 11829 (User overview in settings shows 500)Issue 11847 (Wrong attachment indicator when listing records by tags)Better check on renamed accountsAPIIssue 11822 (API - account transaction type filtering)Issue 11842 (API: /api/v1/configuration always returns unauthenticated for v6.5.1)
Issue 11822 (API - account transaction type filtering)Issue 11842 (API: /api/v1/configuration always returns unauthenticated for v6.5.1)AddedPR 11808 (Add Thai baht to Currency Seeder)
PR 11808 (Add Thai baht to Currency Seeder)FixedIssue 11817 (500 Error if internet is inaccessible while checking for updates)Issue 11814 (Budget : error with CRON after switch user range view)Issue 11750 (500 error when creating first user with USD balance (works after refresh))
Issue 11817 (500 Error if internet is inaccessible while checking for updates)Issue 11814 (Budget : error with CRON after switch user range view)Issue 11750 (500 error when creating first user with USD balance (works after refresh))SecuritySecurity issue where any authenticated user with API access also has read access to the /api/v1/users endpoint. Authenticated users would be able to see other user's email addresses, blocked status and roles, even when not admin. No actual financial data was exposed, just the user's info itself.
Security issue where any authenticated user with API access also has read access to the /api/v1/users endpoint. Authenticated users would be able to see other user's email addresses, blocked status and roles, even when not admin. No actual financial data was exposed, just the user's info itself.APIAdded extra checks to the /api/v1/users endpoints.
Added extra checks to the /api/v1/users endpoints.
Source:
Tweakers.net