Immich

Immich-Fotoverwaltungssoftware prüft bei OAuth2-Anmeldungen den State-Parameter nicht, wodurch Angreifer fremde Konten übernehmen können, indem sie Nutzer dazu bringen, manipulierte Login-Links zu öffnen.

Die Foto-Management-Software Immich überträgt Passwörter für geteilte Alben als sichtbare URL-Parameter, wodurch diese in Browser-Verlauf, Server-Logs und anderen Systemen gespeichert werden und unbefugt eingesehen werden können.

Eine Sicherheitslücke in der Immich-Software ermöglicht es API-Schlüsseln, ihre eigenen Berechtigungen zu erweitern und sich selbst Administratorrechte zu gewähren, ohne dass dies ordnungsgemäß überprüft wird.

Eine Schwachstelle in der Immich-Fotoverwaltungssoftware ermöglicht es authentifizierten Nutzern, schädlichen JavaScript-Code in 360°-Panoramabildern zu verstecken, der dann im Browser anderer Nutzer ausgeführt wird, wenn diese die OCR-Texterkennungsfunktion aktivieren.

Eine Schwachstelle in der Immich-Fotoverwaltungssoftware ermöglicht es registrierten Benutzern, Opfer durch manipulierte Album-Namen auf beliebige Websites umzuleiten, was Phishing-Angriffe zur Passwort-Diebstahl erleichtert.

Eine Schwachstelle in Immich ermöglicht es Angreifern, durch einen manipulierten Link vollständige Kontrolle über Benutzerkonten zu erlangen, indem schädlicher JavaScript-Code ausgeführt und ein dauerhafter API-Schlüssel erstellt wird.

Bug fix release that adds rate limiting and deduplication to version checking functionality, plus translation updates. Minor maintenance release with no breaking changes.

Bug fix release addressing mobile app image rendering issues, including iOS image loading pipeline cleanup, thumbnail cache eviction fixes, metadata display corrections, and cronet version update.

Bug fix release addressing database import failures, mobile image loading issues, people search functionality problems, backup page provider reference handling, and server-side rendering open graph tags. Also includes documentation updates for Docker deprecation links.

Immich v2.7.0 adds asset viewer enhancements including album removal and locked folder actions, keyboard shortcuts for editing, improved face tagging with on-the-fly person creation, enhanced duplicate resolution with automatic suggestions and metadata sync, optional Content Security Policy configur

Bug fix release addressing helmet.json configuration issues, ML container compatibility problems on older CPUs through numpy downgrade, and external library import batch size corrections.

Bug fix release addressing mobile upload timeout issues, web UI scrolling and button positioning problems, empty search suggestions filtering, and asset face synchronization errors. Also includes documentation improvements for API parameters.

Bug fix release addressing shared link upload errors, URL switching issues with external URLs, album selection problems in web interface, and various search filter issues across mobile and web platforms. Also fixes Chinese language availability, image caching, and album permission handling.

Major release with 350+ commits over 6 weeks featuring map side panel, album cover selection, shared link improvements, native HTTP clients, video player enhancements, and OAuth ID token support. Warning: old timeline implementation will be removed in next release, requiring users to switch to new t

Bug fix release addressing mobile app migration failures with URL switching, server fallback issues when user names are empty, album deletion errors, web UI upload handling on logout, EXIF tag writing problems, and various interface improvements including long album title wrapping and button state m

Patch release fixing thumbnail generation running nightly when full-size image generation is enabled, iOS slow startup issues, and Android Free Up Space feature failing with large asset counts. Also includes various UI improvements, translation updates, and performance optimizations for albums and i

Bug fix release addressing timezone handling issues, iOS background task problems, mobile certificate authentication, UI improvements including dark mode fixes, asset management corrections, and various mobile app stability enhancements.

Bug fix release addressing UI issues including editor state management, upload progress bar flickering, asset navigation problems, form validation issues, and metadata extraction race conditions. Also includes documentation improvements for OpenAPI specifications.

Hotfix release addressing video aspect ratio issues, memory generation failures, web memory display problems, and iOS image loading bugs. Mobile app will sync data to fix local database inconsistencies.

Major feature release adding Free Up Space functionality to remove backed-up local files, non-destructive photo editing with crop/rotate/mirror tools, web-based database backup/restore, upload improvements, visual refresh, star ratings, API key permissions, and HTTP/2-3 support. Mobile app release t

Bug fix release addressing shared link expiry saving issues, mobile infinite loading screens on iOS map viewer, slideshow auto-start problems, video aspect ratio display errors, timezone handling bugs, and search bar usability improvements.

Immich v2.4.0 adds command palette for web navigation, shows album owner names, improves mobile asset viewer with reorganized action buttons, enhances search type selection, and includes various UI improvements and bug fixes including metadata extraction concurrency issues.

Hot fix release addressing a critical web app rendering loop issue caused by new version notification pop-ups that would freeze the interface. Also fixes supporter badge display. Users strongly encouraged to update before v2.4.0 release to avoid the freezing problem.

Immich v2.3.0 adds OCR improvements with language-specific models, mobile app enhancements including add/move actions and delete synchronization for Android, fixes iOS app freezing issues, and introduces foundational support for maintenance mode and workflows. Includes various bug fixes and performa

Bug fix release addressing OCR input resizing issues, search bar accessibility improvements, EXIF GPS parsing of malformed data, mobile app handling of empty filenames, and version alert logic for patch releases.

Bug fix release addressing mobile scrubber loading issue on web interface and temporarily disabling asset sync cleanup on mobile app pending further investigation.

Bug fix release addressing mobile app issues including missing activity button, video seeking problems on Android, OCR failures in rootless Docker, asset copy validation errors, timeline navigation issues, and modal display problems. Also includes documentation updates and translation improvements.

Immich v2.2.0 adds Optical Character Recognition (OCR) for text search in images, introduces a new mutable Docker tag for v2 versions, improves web performance with WebAssembly layout calculations, enhances mobile app with album details in asset sheets and similar photo search, and includes various

Minor release with bug fixes and small enhancements including improved slideshow shuffle, timestamp editing with seconds/milliseconds, stack upload functionality, album notifications, and fixes for mobile search scrolling and various UI issues.

Patch release fixing multiple mobile app bugs including asset deletion on share, timeline version checks, places/map asset filtering, shared album activity display, UI overlay issues, database lock scenarios during sync, storage indicator settings, and album selector functionality.

Immich reaches first stable release v2.0.0 with new homepage, improved API documentation, community metrics dashboard, and commemorative physical merchandise. Includes minor bug fixes for asset display, memory allocation, and UI padding. No breaking changes or special upgrade steps required.

Bug fix release addressing upload process issues, timeline improvements, and mobile app enhancements. Fixes include iOS export database issues, temporary file cleanup, local thumbnail loading, timeline ordering, and storage management for iCloud users. Adds motion photo indicators on mobile timeline

Patch release fixing backup delay migration from old timeline and updating web interface translations.

Immich v1.143.0 brings Material 3 UI updates, configurable backup settings for mobile, concurrent hashing improvements, download progress indicators, and fixes for web modal freezing, mobile app stability issues, and Safari clipboard functionality.

Patch release fixing critical timeline migration issues from v1.142.0 that caused data sync problems requiring manual logout/login, plus improvements to Android background sync reliability and various UI bug fixes.