This is a normally scheduled feature and bugfix release.
Resolved issues:
#3689: Panics caused by corrupt on disk database are now better explained in the panic message.
#3817: Statically configured device addresses without port number now correctly defaults to port 22000 again.
#3829: Inotify clients no longer cause 'invalid subpath' errors to be displayed.
New and improved functionality:
#215: Folders can now be paused.
#2679: "Master" folders are now called "send only" in order to standardize on a terminology of sending and receiving changes.
#3407: Pausing devices and folders now persists across restarts.
#3527: A rolling checksum is used to identify and reuse blocks that have moved within a file.
#3790: Syncthing allows setting the type-of-service field on outgoing packets, configured by the advanced setting "trafficClass".
#3809: Which device introduced another device is now visible in the GUI.
Updating during the freeze since the previous version stopped
working for me since the availability of this version.
Changes:
This is an extra bugfix release to fix issues introduced in v0.14.14.
Resolved issues:
#3829: Receiving 'invalid subpath' errors on syncthing-inotify full folder sync trigger
This is an extra bugfix release to fix issues discovered in the upgrade from 0.14.13 to 0.14.14.
Resolved issues:
#3804: Inotify no longer triggers "invalid subpath" error
#3802: Symlinks are not deleted on upgrade
This is a security release recommended for all users.
Two distinct security vulnerabilities have been corrected in this
release. Either would let a remote attacker, controlling a device
that is already accepted by Syncthing, perform arbitrary reads and
writes to files outside the configured folders.
The first issue is that path validation was lacking in several
places, resulting in Syncthing accepting index entries for files
like "../../foo", thus resulting in a path above the configured
folder.
The second issue is that where path validation was correct, symlinks
could be used to trick Syncthing. An attacker could create a symlink
"foo -> ../../" and then request the contents of "foo/something",
again escaping the constraints of the folder.
Syncing symlinks between v0.14.14 and previous versions will not
work.
This is due to the fix to the above issue. Normal files and
directories will sync fine. To continue syncing symlinks, both
sides must be upgraded to v0.14.14.
Further resolved issues:
#3753: The build no longer requires Go 1.7.
#3769: The wording in the GUI around "last file received" is
now clearer.
v0.14.131
This is a minor release recommended for all users.
Resolved issues:
#33946: CPU usage when scanning is improved.
#24722: Writing config and .stignore files on filesystems
without chmod support should now work.
#3758: Language selector stays above the bottom bar.
This is a minor release recommended for all users.
Resolved issues:
#3737: A data race in the code that caused test failures, and possibly other inconsitencies, has been resolved.
#3241: Links in warning messages are now clickable in the GUI.
#3711: Files are now synced to disk before committed to database, to avoid possible inconsistencies if a power failure occurs during syncing.
#3724: Log entries now mention folder by label in addition to the ID.
In addition:
The default folder now has the folder ID "default" again, simplifying initial setup.
Retries for misconfigured relay setups are slowed down somewhat to be kinder on our relay pool infrastructure.
This is a minor release recommended for all users.
Resolved issues
#1015: Introducers can now remove devices that they introduced
#3726: Syncthing now correctly reconnects to staticly configured relays
#3718: strelaysrv: No longer crashes with "panic: send on closed channel"
#3682: strelaysrv: Binding to a specific address now works better
#3710: Folder information in the GUI now uses icons and tooltips
This is a minor release recommended for all users.
Resolved issues:
#36236: Display of global and local state is clearer, especially in the presence of ignores.
#36471: GUI does not show "failed items" unless there are items that have failed.
Also:
Fixes to questionmark and asterisk handling in ignore patterns.
Build script can create a snap file.
"Black" theme re-added.
Debugging options for deadlocks.
v0.14.9
Resolved issues:
#3651: Documentation PDFs are fixed.
#3638: German localisation is improved. (As are a couple of others as I forgot to update them the last release.)
#3619: Browser error on first startup doesn't happen as easily anymore.
#3664: Syncthing compiles in Go versions older than 1.7 again.
#3577: Adding folder using Long UNC path no longer causes stack overflow (but don't do that, it's not necessary).
v0.14.8
This is a minor release recommended for all users.
The main change here is to handle issues with the new SHA256 implementation introduced in 0.14.7. When using the monitor process (which is the default) crashes will be detected and the new hashing package disabled. A manual selection can also be forced by setting the environment variable STHASHING to either minio (the new package) or standard (the default Go package).
Resolved issues:
#3613: The monitor process now detects crashes due to the new hashing package and disables it on subsequent launch.
#3614: The two hash packages are benchmarked on startup and the fastest on is selected.
#3588: Folders are now correctly shown as out of sync when they miss only deleted files.
#3578: UPnP handling is corrected in the case where more than one router is detected.
#3639: Patterns with terminal slash (e.g., "dir/") now correctly ignore directory contents.
v0.14.7
This is a minor release recommended for all users.
Improvements in this release include faster (i.e., less CPU intensive)
hashing on some Intel and ARM64 CPU:s, a more refined dark theme,
CORS headers in the API, and an updated set of default discovery
servers.
Resolved issues since v0.14.6:
#3596: Deadlock no longer occurs on device removal
This is a minor release recommended for all users.
Resolved issues since v0.14.5:
#3496: In sync percentages no longer go negative for large numbers of deleted files.
#3502: Files that were deleted and then ignored are no longer deleted on other devices that didn't ignore them.
#3525: Configuration is no longer moved away when perfoming an upgrade on a full disk.
Update syncthing to v0.14.4
This is a minor release recommended for all users. Several bugs have been fixed and enhancements added.
Enhancements:
Timestamps are now compared with up to nanosecond precision and synced with up to microsecond precision, depending on the filesystem in use.
Restart no longer needed to remove devices, unshare or reconfigure folders.
Resolved issues since v0.14.3:
#1300: In sync percentage is weighted to folder size, not just average of folder completion.
#3012: Files with invalid file names for Windows now show up in the list of failed items.
#3297: Accessibility in the GUI is improved.
#3305: High precision time stamps.
#3457: Ignores and invalid file names are now handled correctly when delta indexes are being used.
#3458: Files inside directories with names ending in space are now correctly handled on Windows.
#3466: Connection switching (relay->direct) no longer causes a crash.
#3468: Old index databases (v0.11-v0.12 and v0.13) are now properly cleaned away from disk.
#3470: Syncthing no longer claims a connection was from an ignored device when the device is just unknown.
Update to 0.14.3; this is a new major version with an incompatible
protocol. It has been tested with syncthing-android 0.8.1.
Redo build layout, so that the sources are placed at the path
recommended by upstream. Reduce the number of symlinks used to get go
building to work.
Upstream changes:
v0.14.3: 3 bugfixes
v0.14.2: 1 bugfix
v0.14.1: 1 bugfix and
This release includes "delta indexes", a backwards compatible protocol
enhancement. Prior to delta indexes being implemented, full index
information was exchanged at every connection start. With delta
indexes, only index information that has changed since last contact is
transferred. Delta indexes are enabled automatically between 0.14.1+
devices.
v0.14.0: many bugfixes and
This is a new major release, incompatible with Syncthing v0.13 and
earlier. This release introduces a new, extensible sync protocol
and corresponding changes to local discovery and the database. The
sync protocol, local discovery protocol and database format is now
based on protocol buffers.
v0.13.10
This is a regular bugfix release recommended for all users.
#3128: Generated folder IDs are now lower case.
#3338: Syncthing now uses shorter temporary file names, alleviating issues on encfs.
#3335: Event IDs seen in /rest/system/events are now sequential again.
#3362: Tests now pass on when building on arm64.
#2471: Folders are now marked "stopped" when missing a path, and duplicate folder IDs are not accepted.
#3375: A stalling TLS handshake no longer blocks the connection service.
#3346: The global discovery server now correctly handle IPv6 announces over IPv4 and vice versa.
v0.13.9
This release fixes a crash on 32 bit platforms introduced in 0.13.8.
v0.13.8
Resolved issues:
#3306: The layout of the out of sync items dialog has been improved.
#3310: Folders are now sorted by label, falling back to ID when required.
#3330: Windows zip files now make sense when unpacked on non-Windows.
#3321: Folder name completion now works for empty names on non-Windows.
#2782: Folders can now be symbolic links also when using ~-relative paths.
New features and enhancements:
#3340: The discovered device addresses are now shown for disconnected devices.
v0.13.7
Fixes the issue with the GUI being grey on startup (#3301)
v0.13.6
This is a bugfix release. There are also multiple cleanups and minor improvements to the web UI by @norgeous.
Resolved issues:
#3262: v0.13.5 -no-upgrade build now requires gcc (@calmh)
#3267: Favicon should not be animated (@calmh)
#3136: Toggling HTTP/HTTPS breaks GUI/API (@calmh)
#3287: Understand older/newer Hello messages (@calmh)
Warnings on relay connectivity issues are reduced (@scienmind)
Tested with syncthing-android 0.7.18 (syncthing 0.13.0).
Packaging changes: increase GOPATH hackery.
Upstream changes: bug and security fixes, plus a major version upgrade
with an incompatible protocol.
Syncthing v0.13.0 "Copper Cockroach"
Upgrade Notes
v0.13 is not protocol compatible with v0.12.
The database format has changed. It will be migrated without rescan
on first startup, but the first startup may take longer than usual.
Major Changes Since v0.12
Devices now announce files that are in progress of being downloaded,
in addition to those that are already complete. This means a device
can serve parts of a file to other devices before it has completed
the download itself.
Folder labels are now distinct from the folder ID. The intention is
for the label to be human readable and for the ID to be machine
readable and unique. When upgrading, folder IDs are not
changed. However when creating new folders Syncthing will suggest a
random, unique folder ID.
When receiving a connection attempt from an unknown device Syncthing
will now show the name of that device, not only it's ID.
Syncthing will now manage port mappings on NAT-PMP compliant routers,
in addition to the existing UPnP support. Minor Changes and
Improvements
Ignored files can now be tagged with the prefix (?d) to indicate that
Syncthing may delete these files if they remain when deleting a
directory. Ignore patterns use less memory by default.
The address for sync connections, both the listening side and for
remote devices, can now be made IPv4- or IPv6-only. Use the tcp4:// or
tcp6:// schemes to specify one or the other. The default tcp:// is
still dual stack. Additionally, relays are now treated as listen
addresses and set in the same configuration setting.
The folder settings dialog has been cleaned up.
The environment variable ALL_PROXY_NO_FALLBACK can be set to disable
falling back to direct connections in the absence of a working proxy.
Many, many bug fixes.
Known Issues
The "Syncing" complete percentage for remote devices may erroneously
display more than 100% (i.e. 156% or 297%) while a remote device is
still synchronizing.
CVS: ----------------------------------------------------------------------
CVS: CVSROOT cvs.NetBSD.org:/cvsroot
CVS: please use "PR category/123" to have the commitmsg appended to PR 123
This is a security release to fix three vulnerabilities all related
to the possibility of the automatic upgrade response being intercepted
by a man-in-the-middle. In one case, a downgrade could be enforced
by the attacker; in another, a denial of service could be created
by serving a malformed package archive; in the third, an XSS attack
could be performed against the local web UI. These were all reported
by Sebastian Py.
- lib/upgrade: Enforce limits on download archives (fixes#3045) (calmh)
- lib/upgrade: Auto upgrade signature should cover version & arch (fixes#3044) (calmh)
- gui: Backport angular and angular-translate updates from master (calmh)
v0.12.21
- lib/model: Correct handling of multiple subs when scanning (#2851, @calmh)
- lib/model: Properly handle deleting multiple files when doing scans with subs (#2851, @calmh)
- Clarify GUI stuff (#2819, @AudriusButkevicius)
- Increase contrast for readonly form controls in dark theme (#2820, @wweich)
- gui: Improve layout of footer on narrow screens (#2663, @calmh)
- lib/relay/client: Log relay client messages (#2624, @AudriusButkevicius)
- gui: Better accessibility for folder & device panels (#2288, @wweich)
v0.12.20
- Add priority,section and homepage to debian/control (Laurent Arnoud)
- Fix description-contains-tabs and improve description (Laurent Arnoud)
- gui: add a lock icon to the folder title for easy overview (fixes#2703) (@kralo)
- gui: add html tooltips (title) to the folder path and syncthing version elements (fixes#2758) (@kralo)
- systemd: Add syncthing-resume.service (@rumpelsepp)
- Only test with -race on supported platforms (fixes#2765) (@calmh)
Interoperation with syncthing-android is still very important, but
some have told me that they use syncthing among POSIXish systems
without android as a replacement for rsync/unison, more or less. Keep
the notion of deferring major upgrades to stay in sync with f-droid.
(This is in no way a complaint about the previous minor upgrade, which
was most welcome; it just caused me to look at this and notice my
previous text was too strong.)
CVS: ----------------------------------------------------------------------
CVS: CVSROOT cvs.NetBSD.org:/cvsroot
CVS: please use "PR category/123" to have the commitmsg appended to PR 123
v0.12.19
- Return "No such object in the index" when /rest/db/file gets
called on something that doesn't exist (@calmh)
- Swap the corsMiddleware and the csrfMiddleware to the unauthenticated
OPTIONS requests are first processed. (@letiemble)
- Report versioning usage in usage report (@calmh)
v0.12.17
- Handle null case for invalid ng-model value (#2392, @tpng)
- Use dialer in relay checks (#2732, @AudriusButkevicius)
Plus some minor line shuffling for pkglint
v0.12.15
- Handle race within the job queue (#1263, @AudriusButkevicius)
- Improve API/GUI shutdown handling (#2694, @calmh)
- Don't crash on folder remove while pulling (#2705, @calmh)
This release uses code signing on Mac OS X.
v0.12.14
This is a security update. The Windows builds are now done using Go 1.6beta2, otherwise this is identical to v0.12.13.
v0.12.13
This build is a security update.
- Add support for themes (#1925, @AudriusButkevicius)
- Don't leak sendIndexes on disconnect (#2589, @calmh)
- Always run relaying when enabled (#2665, @calmh)
- Update 'Edit' menu to 'Action' menu (#2662, @kluppy)
v0.12.12
- Update kardianos/osext (#2650, @calmh)
- Change default max conflicts to 10 (#2604, @calmh)
- Don't conflict copy conflict copies (#2605, @calmh)
- Don't allow in use CSRF tokens to expire (#1008, @calmh)
- Add relaying to main settings dialog (#2433, @calmh)
- Don't resolve destination address until we need to (#2671, @calmh)
- More fine grained locking in discovery cache (#2667, @calmh)
- Added STNODEFAULTFOLDER envvar to skip default folder creation on new install (#1515, @nrm21)
v0.12.11
- Remove windows specialisation from osutil.GetLans (#2192, @AudriusButkevicius)
- Ensure loaded config is free of duplicate devices (#2627, @calmh)
- Show device ID QR code from edit dialog (#1494, @ironmig)
- Don't warn about failed ignores if folder unhealthy (#2630, @AudriusButkevicius)
- Detect nonstandard hash algo and stop folder (#2314, @calmh)
- Also build linux-arm64, linux-ppc64, linux-ppc64le (@calmh)
- Disallow adding duplicate device ID in GUI (@ironmig)
v0.12.10
- Don't crash on stat error in ensureDir (#2608, @calmh)
- Correctly set default logfile location on Windows (#2608, @calmh)
- Consider tempfile when checking for free space (#2598, @andersonvom)
- Update kardianos/osext (#1272, @calmh)
- Remove fixed footer at first media break (#2454, @andersonvom)
- Update mtime of config file before upgrading (#2509, @andersonvom)
- Correct GUI asset dir handling (#2621, @calmh)
v0.12.9
- Example GUI override address (#2530, @calmh)
- Additional output on insufficient error (#2580, @Zillode)
- Add command line option to open GUI (#2210, @andersonvom)
- Always exit via error select, making sure reader routine is exits (#2547, @AudriusButkevicius)
- Don't verify free space for files when folder MinDiskFreePct==0 (#2600, @calmh)
- Edit device after accepting new connection (#1929, @andersonvom)
v0.12.8
- Correct type assertion in verbose logger, restart (#2561, @calmh)
- Remove Android hacks (#2505, @calmh)
- upnp: Use a separate error for the error unmarshalling (@wkennington)
syncthing upstream regularly breaks protocol compatibility. Define
that we will update when f-droid does and that testing against android
is required for major updates, in an attempt to avoid imposing pain on
users and also avoid having to have many versions. Take maintainership.
More or less discussed with tnn@ and jnemeth@.
v0.12.7:
Filenames added to audit log in the LocalIndexUpdated event (#2549, @nrm21)
staticClient.connect(): don't handshake twice (fixes#2547, #2548) (@canton7)
Fix STTRACE=http (it should use the http debug logger) (@calmh)
v0.12.6
@calmh calmh released this 3 days ago · 6 commits to master since this release
Allow #urPreview to scroll in the browser (#2537, @canton7)
Fix deleting folders on WinXP (#2522, @buinsky)
New key for discovery-*-3
Handle backoff on discovery
v0.12.5
@calmh calmh released this 6 days ago · 17 commits to master since this release
Update osext dependency (#1272, @calmh)
Compact database on startup (#2400, @calmh)
Don't chmod in Atomic on android (#2472, @kluppy)
Fix symlinks (#2524, @AudriusButkevicius)
Generate ECDSA keys instead of RSA (#2523, @calmh)
Take timeout into account when dialing (#2521, @AudriusButkevicius)
Improve upgrade error messages (#2510, @plouj)
NB: 0.12.x is not compatible with 0.11.x. F-droid has a version that
is now interoperable with 0.12, vs 0.11. Upstream changes:
0.12.4:
Warn the user if they're running with an insecure looking setup (#2139, @calmh)
Add remaining scanning time (#2484, @calmh)
Handle sparse files (#245, @calmh)
Improved relay handling (@AudriusButkevicius)
0.12.3:
Fix address list in DeviceDiscovered, add debug prints (#2444, @calmh)
Audit logins with new LoginAttempt event (#2377, @tylerbrazier)
More local discovery URL debugging (#2444, @calmh)
Made upgrade-system smarter (#2446, @Stefan-Code)
Remove folder without restart (#2262, @calmh)
Don't dirty blockmap key between lookups (#2455, @calmh)
0.12.2:
Change a discovery server certificate
Fix "INFO: bug: uncached path call" log output on first startup
0.12.1:
Actually do negative caching on failed discovery lookups (#2434, @calmh)
Syncthing replaces proprietary sync and cloud services with something open,
trustworthy and decentralized.
Features include:
- web admin console
- directory watcher
- authentication with x509 certificates
- node discovery
- written in "go"
