pterodactyl/wings v1.0.0-rc.7

v1.0.0 Release Candidate 7

on GitHub

Fixed

• [Security] Prevents the allowed_mounts configuration value from being set by a remote API call.
• Fixes an unexpected error when attempting to make a copy of an archive file.
• Fixes certain expected filesystems errors being returned to the API as a 500 error rather than a 4XX series error.
• Fixes a panic crash when there is no text on a line and the parser is attempting to determine if the line is a comment.
• Fixes multiple filesystem operations to correctly check, increment, and decrement disk usage for a server.
• Fixes a negative disk space usage issue when deleting a file due to a bad int swap.
• Errors from a websocket connection being closed will no longer spam the console.
• Fixes an extraneous . in the install script for servers causing errors in some scenarios.
• Fixes unexpected error spam due to a change in how os.ErrNotExist is returned from some functions.

Changed

• Stacktrace is no longer emitted when warning that an image exists locally.
• Configuration parser now attempts to create the directory structure leading to a configuration file if it is missing.
• If a file name is too long for the system a nice error is returned to the caller.
• Enables client version negotiation for Docker to support more versions.
• Disk space errors are no longer logged into the wings logs.
• Servers can no longer be reinstalled while another power action is currently running. This avoids data collisions and wings running into issues with the container state.
• Wings now uses 1024 rather than 1000 bytes when calculating the disk space usage for a server to match how the Panel reports usage.
• JWT errors in the websocket are now sent back to the connection as a specific event type allowing them to be handled even if the timer fails to execute or executes but is not being listened for.
• A server struct is no longer embedded in the virtual filesystem allowing for easier testing and modularization of the codebase.
• Server websockets are now closed when a server is deleted, disconnecting any currently connected clients.

Removed

• [Security] Removes the SafeJoin function which could wrongly assume the state of a file and allow a user to escape the root if the developer implementing the call calls Stat rather than Lstat.

SHA256 Checksum

800b0e33fa409be01d208d389da04858051fde4acac0d4667614b19daf82e5e6  wings_linux_amd64