Kimai

最近の更新

• 2.70.2 2026年10月21日
  リリースノート（原文）

  **Compatible with PHP 8.2 to 8.5**
  
  * Rebuild docker images for ARM - thanks @dasrecht
  
  You can read more about all security reports [here](https://www.kimai.org/documentation/bughunter.html#published-vulnerabilities) or grab this [RSS feed](https://www.kimai.org/security.xml) to get notified about new published advisories.
  
  Involved in this release: @kevinpapst
  

• 2.70.1 2026年10月21日
  リリースノート（原文）

  **Compatible with PHP 8.2 to 8.5**
  
  ## 🚨 SECURITY 
  This release exists mainly to trigger a rebuild of our Docker images, which will the ship fixed PHP versions. 
  See [our blog post](https://www.kimai.org/en/blog/2026/php-cve) for more information or peek in #6262.
  
  ## Bugfixes
  
  - Use correct body type in JS form posts (#6264)
  
  You can read more about all security reports [here](https://www.kimai.org/documentation/bughunter.html#published-vulnerabilities) or grab this [RSS feed](https://www.kimai.org/security.xml) to get notified about new published advisories.
  
  Involved in this release: @kevinpapst
  

• 2.70.0 2026年10月19日
  リリースノート（原文）

  **Compatible with PHP 8.2 to 8.5**
  
  ## Features
  
  - Password strength configuration (#6242)
  - CSS classes for customization (working contract screen) (#6240)
  - Translations update from Hosted Weblate (#6235) (#6253)
  
  ## 🚨 Security
  
  - Prevent internal preferences from being updated via API - thanks @sharma19d (#6240)
  - Make sure that remembered users cannot skip the password-change wizard - thanks @sharma19d (#6240)
  - Update security-signature on password-reset and end all active sessions - thanks @Tan-JunWei (#6240)
  - Added EnvVarProcessor to parse TRUSTED_HOSTS - thanks @dylanzonix (#6246)
  - Only the logged-in user can activate 2fa - thanks @AzureADTrent (#6240)
  
  You can read more about all security reports [here](https://www.kimai.org/documentation/bughunter.html#published…