Skip to content

Teampass

v3.2.0.9 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 8d Secrets & Credentials
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

php

Affected surfaces

auth

ReleasePort's take

Light signal
editorial:auto 7d

Background tasks on Windows now fetch payloads from the database, eliminating exit code 255 and command‑line length issues. LDAP TLS handling corrections ensure proper certificate verification for PHP 8 compatibility.

Why it matters: Fixes cause background task failures (exit 255) and LDAP login misconfigurations; requires PHP ≥ 8.2 to operate correctly.

Summary

AI summary

Updates Important, 🐛 Bug fixes, and ⬆️ Upgrade notes across a mixed release.

Changes in this release

Dependency Low

Minimum required PHP version increased to 8.2.

Minimum required PHP version increased to 8.2.

Source: llm_adapter@2026-07-19

Confidence: high

 —
Bugfix Medium

Background tasks on Windows now read payload from database, avoiding exit code 255 and command-line limit.

Background tasks on Windows now read payload from database, avoiding exit code 255 and command-line limit.

Source: llm_adapter@2026-07-19

Confidence: high

 —
Bugfix Medium

LDAP TLS certificate check setting now correctly converts string constants to integer values for PHP 8 compatibility.

LDAP TLS certificate check setting now correctly converts string constants to integer values for PHP 8 compatibility.

Source: llm_adapter@2026-07-19

Confidence: high

 —
Bugfix Medium

LDAP login now respects the TLS certificate check setting instead of using a misspelled key.

LDAP login now respects the TLS certificate check setting instead of using a misspelled key.

Source: llm_adapter@2026-07-19

Confidence: high

 —
Full changelog

What's Changed

This is a bug fix release. It addresses two unrelated issues reported in #5289 and contains no database schema change, so upgrading from 3.2.0.8 requires no upgrade procedure.

🐛 Bug fixes

  • Background tasks failing with exit code 255 on Windows (#5289) - the task payload was passed to the worker as a shell argument. On Windows, escapeshellarg() replaces every ", % and ! with a space, which destroyed the JSON payload and left every task running with an empty argument set, failing with a TypeError on the first missing argument. Only the inactive-users housekeeping task, which reads no arguments, was unaffected. The worker now reads its payload from the database using its task id, which also removes the ~8191-character Windows command-line limit and keeps encrypted credentials out of the process list. An undecodable payload now fails with an explicit log entry instead of silently degrading. Linux installations were not affected.
  • TypeError when applying the LDAP TLS certificate check setting (#5289) - the setting stores the constant name as a string (for example LDAP_OPT_X_TLS_NEVER) while ldap_set_option() requires the matching integer value, raising a TypeError on PHP 8 when listing LDAP user statuses. A shared conversion helper now maps the stored name to its integer value on every call site, falling back to LDAP_OPT_X_TLS_HARD for unknown or legacy values.
  • LDAP TLS setting silently ignored on the login path - the connection class used at login read a misspelled setting key (ldap_tls_certiface_check) that is never written anywhere, so the lookup always failed and fell back to a hard-coded value. This is why LDAP login kept working while the user-status lookup crashed, but it also meant the configured TLS option had no effect at login. Fixed together with the above, since correcting the key alone would have broken LDAP login.

⬆️ Upgrade notes

  • No database change in this release. UPGRADE_MIN_DATE is intentionally left at its 3.2.0.8 value so that upgrading users are not sent through the upgrade process.

Full Changelog

Full Changelog: https://github.com/nilsteampassnet/TeamPass/compare/3.2.0.8...3.2.0.9

Important

  • Requires at least PHP 8.2

Languages

Please join Teampass v3 translation project on Poeditor and translate it for your language.

Installation

Follow instructions from Documentation.

Upgrade

Follow instructions from Documentation.

Ideas and comments

Are welcome ... please use Discussions.

Breaking Changes

  • Requires at least PHP 8.2
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Teampass

Get notified when new releases ship.

Sign up free

About Teampass

Password manager dedicated for managing passwords in a collaborative way. One symmetric key is used to encrypt all shared/team passwords and stored server side in a file and the database. works on any server Apache, MySQL and PHP.

All releases →

Related context

Earlier breaking changes

  • v3.2.0.8 Enforces folder‑level rights on bulk delete, move, and items_delete operations (#5275).

Beta — feedback welcome: [email protected]