From d7e7e77f930f6887af8215a6d6a87400383031ca Mon Sep 17 00:00:00 2001 From: ed Date: Mon, 4 Aug 2025 00:13:54 +0000 Subject: [PATCH] v1.18.10 --- copyparty/__version__.py | 4 +- docs/changelog.md | 43 ++++++++ docs/logo-sq.svg | 216 +++++++++++++++++++++++++++++++++++++++ docs/logo256.svg | 209 +++++++++++++++++++++++++++++++++++++ tests/util.py | 2 +- 5 files changed, 471 insertions(+), 3 deletions(-) create mode 100644 docs/logo-sq.svg create mode 100644 docs/logo256.svg diff --git a/copyparty/__version__.py b/copyparty/__version__.py index a82053fb..30bd3fd6 100644 --- a/copyparty/__version__.py +++ b/copyparty/__version__.py @@ -1,8 +1,8 @@ # coding: utf-8 -VERSION = (1, 18, 9) +VERSION = (1, 18, 10) CODENAME = "logtail" -BUILD_DT = (2025, 8, 1) +BUILD_DT = (2025, 8, 4) S_VERSION = ".".join(map(str, VERSION)) S_BUILD_DT = "{0:04d}-{1:02d}-{2:02d}".format(*BUILD_DT) diff --git a/docs/changelog.md b/docs/changelog.md index 5e1d7717..3cc8bdf1 100644 --- a/docs/changelog.md +++ b/docs/changelog.md @@ -1,3 +1,46 @@ +▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ +# 2025-0801-2056 `v1.18.9` fix Denial-of-Service + +## ⚠️ ATTN: this release fixes a Denial-of-Service vuln + +[CVE-2025-54796](https://github.com/9001/copyparty/security/advisories/GHSA-5662-2rj7-f2v6): an unauthenticated user could make the server grind to a halt by accessing a particular URL + +## recent important news + +* [v1.18.9 (2025-08-01)](https://github.com/9001/copyparty/releases/tag/v1.18.9) fixed [CVE-2025-54796](https://github.com/9001/copyparty/security/advisories/GHSA-5662-2rj7-f2v6) (Denial-of-Service) +* [v1.15.0 (2024-09-08)](https://github.com/9001/copyparty/releases/tag/v1.15.0) changed upload deduplication to be default-disabled +* [v1.14.3 (2024-08-30)](https://github.com/9001/copyparty/releases/tag/v1.14.3) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to **data loss** -- see the v1.14.3 release-notes for details + +## 🧪 new features + +* #310 translated to Spanish (thx @herruzo99!) a1dfd0be +* #350 translated to Ukrainian (thx @MrMebelMan!) fea45e45 +* #321 translated to Russian (thx @A1Asriel!) 0b05c726 +* #381 translated to Finnish (thx @icxes and @Permik!) 7ecedb2c + * haha it says surf +* #312 add option to use localtime in the UI ad23b253 +* #386 initial packaging for debian (thx @Beethoven-n!) 3c6f0b17 + +## 🩹 bugfixes + +* CVE-2025-54796 / GHSA-5662-2rj7-f2v6 09910ba8 +* #347 fix upload-abort when uploading to a share 6d6d79fc +* fix xiu backlog dropping on restart 3222ba3a +* #375 fix crash on really old versions of python2.7 (thx @bb!) b69d5901 +* #388 another python2.7 fix: improve unicode support in u2c (thx @KevinXuxuxu!) 9c197535 +* log creator of new/blank markdown docs d0d2f206 +* #400 config didn't support indenting with tabs c1604288 + +## 🔧 other changes + +* `ack` was changed to `continue` 4fa7be2a + +## 🌠 fun facts + +* the translations have made the sfx size balloon from 766 to 845 KiB in under a week... nice! keep em coming :tada: + + + ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ # 2025-0731-0833 `v1.18.8` sfx hotfix diff --git a/docs/logo-sq.svg b/docs/logo-sq.svg new file mode 100644 index 00000000..cca66519 --- /dev/null +++ b/docs/logo-sq.svg @@ -0,0 +1,216 @@ + + + + copyparty_logo + + + + + + + + + + + + image/svg+xml + + copyparty_logo + github.com/9001/copyparty + + + + + + + + + + + + + + + + + + + diff --git a/docs/logo256.svg b/docs/logo256.svg new file mode 100644 index 00000000..8fdb2782 --- /dev/null +++ b/docs/logo256.svg @@ -0,0 +1,209 @@ + + + copyparty_logo + + + + + + + + + + + + image/svg+xml + + copyparty_logo + github.com/9001/copyparty + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/tests/util.py b/tests/util.py index f555a37e..ea9bfeb9 100644 --- a/tests/util.py +++ b/tests/util.py @@ -161,7 +161,7 @@ class Cfg(Namespace): ex = "au_vol dl_list mtab_age reg_cap s_thead s_tbody tail_tmax tail_who th_convt ups_who zip_who" ka.update(**{k: 9 for k in ex.split()}) - ex = "db_act forget_ip idp_store k304 loris no304 nosubtle re_maxage rproxy rsp_jtr rsp_slp s_wr_slp snap_wri theme themes turbo u2ow zipmaxn zipmaxs" + ex = "db_act forget_ip idp_cookie idp_store k304 loris no304 nosubtle re_maxage rproxy rsp_jtr rsp_slp s_wr_slp snap_wri theme themes turbo u2ow zipmaxn zipmaxs" ka.update(**{k: 0 for k in ex.split()}) ex = "ah_alg bname chmod_f chpw_db doctitle df exit favico idp_h_usr ipa html_head lg_sba lg_sbf log_fk md_sba md_sbf name og_desc og_site og_th og_title og_title_a og_title_v og_title_i shr tcolor textfiles unlist vname xff_src zipmaxt R RS SR"