mirror of
https://github.com/9001/copyparty.git
synced 2026-11-10 12:08:22 +00:00
-
feyisay07 released this
2026-10-09 22:05:01 +01:00 | 11 commits to hovudstraum since this release📅 Originally published on GitHub: Tue, 06 Oct 2026 01:04:40 GMT
🏷️ Git tag created: Tue, 06 Oct 2026 00:35:29 GMT
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an
@everyonein case of future important updates, such as vulnerabilities (most recently 2026-10-06)⚠️ ATTN: this release mitigates a Windows/MacOS-specific issue with shadowing
GHSA-3c88-p299-7hvr: due to windows/macos having case-insensitive (casefolding) filesystems, shadowing is not bulletproof, even with this fix
recent important news
- v1.20.25 (2026-10-05) improved shadowing on Windows/MacOS
- v1.20.19 (2026-07-27) fixed an FTP-server vuln (upload outside defined volumes)
- v1.20.17 (2026-07-06) introduced csp nonces, possibly breaking some javascript-based plugins
🧪 new features
- #1498 --acao-re for allowing cross-domain access with more complex rules
ab2299e3 - #1652 redup: detect and skip hardlinks / reflinks which are already optimally deduplicated
08093578 - --sftp-fastldr to improve startup time on extremely old hardware
186cbf93 - --sftp-chattr to restrict chattr to certain properties
e59fc05e
🩹 bugfixes
- GHSA-3c88-p299-7hvr
e8de4211- for further context, torvalds has some technically accurate and colourful opinions (nsfw) on how casefolding filesystems are an ongoing mistake
- on a more serious note, the readme was updated
- fix uploads struggling to resume from a network glitch if the server filesystem is FAT32 or exFAT
23e00c0a731dbbff - #1647 shares: fix cleanup of single-file shares when manually deleted before expiration (thx @willie6666!)
f445bfa8 - #1660 ban-pw now more aggressive on failed basic-auth (thx @PAStheLoD!)
5e0a88e3 - #1656 webdav: return 404 instead of 400 when file didn't exist
74b17374 - fix navigating to an index.html webroot (thx @tilse!)
334dccc5 - fix IP-address detection on Windows XP
107dec9e
🔧 other changes
- #1658 constant-time verification of filekeys/dirkeys (thx @rozbb!)
a31870cb - prevent enabling the smb server unless
--hack-me-brois also enabled because the smb-server was intentionally made super-insecure so it would work with ancient outdated equipment in emergencies and should never be used otherwise1341b342 - now possible to upload 09. t+pazolite - I still think about y%#'()*{\"'&36)%("'$&''&(15y!!!??*`~.flac (dont click that link on acid)
28f9f6f064f574fe
🌠 fun facts
💾 what to download?
download link is it good? description copyparty-sfx.py ✅ the best 👍 runs anywhere! only needs python copyparty-en.py ✅ also good same but english-only, no i18n a docker image it's ok good if you prefer docker 🐋 copyparty.exe ⚠️ acceptable for win8 or later; built-in thumbnailer u2c.exe ⚠️ acceptable CLI uploader as a win7+ exe (video) copyparty.pyz ⚠️ acceptable similar to the regular sfx, mostly worse copyparty-en.pyz ⚠️ acceptable english-only, no smb-server copyparty32.exe ⛔️ dangerous for win7 -- never expose to the internet! cpp-winpe64.exe ⛔️ dangerous runs on 64bit WinPE, otherwise useless bootable usb ┐(ﾟ∀ﾟ)┌ a surprisingly useful joke (x86_64) Downloads
