9001/copyparty v1.9.18

cache invalidation

on GitHub

• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

no vulnerabilities since 2023-07-23

• there is a discord server with an @everyone in case of future important updates
• v1.8.7 (2023-07-23) - CVE-2023-38501 - reflected XSS
• v1.8.2 (2023-07-14) - CVE-2023-37474 - path traversal (first CVE)

bugfixes

• #61 search results could contain stale records from overlapping volumes:
  • if volume /foo is indexed and then volume /foo/bar is later created, any files inside the bar subfolder would not become forgotten in /foo's database until something in /foo changes, which could be never
  • as a result, search results could show stale metadata from /foo's database regarding files in /foo/bar
  • fix this by dropping caches and reindexing if copyparty is started with a different list of volumes than last time
• #60 client error when ctrl-clicking search results
• icons for the close/more buttons in search results are now pillow-10.x compatible

other changes

• u2c.exe: upgraded certifi to version 2023.11.17

⚠️ not the latest version!