github 9001/copyparty v1.9.17
11-11

latest releases: v1.15.3, v1.15.2, v1.15.1...
10 months ago

no vulnerabilities since 2023-07-23

  • there is a discord server with an @everyone in case of future important updates
  • v1.8.7 (2023-07-23) - CVE-2023-38501 - reflected XSS
  • v1.8.2 (2023-07-14) - CVE-2023-37474 - path traversal (first CVE)
    • all serverlogs reviewed so far (5 public servers) showed no signs of exploitation

new features

  • u2c.py / u2c.exe (the commandline uploader):
    • -x is now case-insensitive
    • if a file fails to upload after 30 attempts, give up (bitflips)
    • add 5 sec delay before reattempts (configurable with --cd)

bugfixes

  • clients could crash the file indexer by uploading and then instantly deleting files (as some webdav clients tend to do)
  • and fix some upload errorhandling which broke during a refactoring in v1.9.16

other changes

  • upgraded pyftpdlib to v1.5.9

💾 what to download?

download link is it good? description
copyparty-sfx.py ✅ the best 👍 runs anywhere! only needs python
a docker image it's ok good if you prefer docker 🐋
copyparty.exe ⚠️ acceptable for win8 or later; built-in thumbnailer
u2c.exe ⚠️ acceptable CLI uploader as a win7+ exe (video)
copyparty32.exe ⛔️ dangerous for win7 -- never expose to the internet!
cpp-winpe64.exe ⛔️ dangerous runs on 64bit WinPE, otherwise useless
  • except for u2c.exe, all of the options above are equivalent
  • the zip and tar.gz files below are just source code
  • python packages are available at PyPI

Don't miss a new copyparty release

NewReleases is sending notifications on new releases.