PeerTube

SECURITY

• Prevent ReDOS from useragent package by removing deprecated Do Not Track feature. Thanks to Patrick Bohn Matthiesen and Leonora from IT University of Copenhagen for reporting this vulnerability!

Bug fixes

• Correctly display bulk actions button in “My videos”
• Keep playlist name original casing in “My videos”
• Fix PIP button z-index on Firefox
• More robust S3 upload and ACL error handler
• Fix broken video state on S3 move failure
• Reset filters when loading query params in “Browse videos”
• Fix upload tab title when the file is uploaded
• Fix follow card overflow in about page
• Convert to full UUID request param id in filter:html.embed.video.allowed.result and filter:html.embed.video-playlist.allowed.result plugin hooks
• Fix HLS playback issue on Chrome 138
• Fix selecting frame on Safari
• Fix input search with multiple prefix tokens
• Fix channel sync duplicate after video deletion
• Fix caption raw edition when editing segment
• Fix accessibility issues:
  • Fix embed title/avatar accessibility
  • Add player P2P up/down info aria label
  • Support escape key in the player settings menu
  • Support arrow left/right navigation in the settings menu
  • Fix entry focus when navigating in the settings menu
  • Add aria controls attribute to settings button
  • Thanks to Woebin from Access Lab and HowlRound Theatre Commons for conducting the player accessibility audit!