v1.20.26

9001/copypartyv1.20.26Oct 14, 2026by 9001

Upgrading?

AI Summary

This maintenance release focuses on bug fixes for JXL thumbnails, symlink handling in xvol/xdev, and filesystem warnings. It also removes the unmaintained openjpeg dependency from Docker images.

Key Highlights

  • xvol/xdev now typically excludes un-followable symlinks from listings
  • Fixed JXL thumbnail generation failures for raw photos
  • Removed unmaintained openjpeg dependency from Docker images
  • Resolved false-positive warnings regarding shadowing on casefolding filesystems

New Features

  • xvol/xdev now usually doesn't list symlinks that can't be followed

Full Release Notes

<img src="https://github.com/9001/copyparty/raw/hovudstraum/docs/logo.svg" width="250" align="right"/>

* read-only demo server at https://a.ocv.me/pub/demo/
* [docker image](https://github.com/9001/copyparty/tree/hovudstraum/scripts/docker) β•± [similar software](https://github.com/9001/copyparty/blob/hovudstraum/docs/versus.md) β•± [client testbed](https://cd.ocv.me/b/)

there is a [discord server](https://discord.gg/25J8CdTT6G) with an `@everyone` in case of future important updates, such as [vulnerabilities](https://github.com/9001/copyparty/security) (most recently 2026-10-06)

## recent important news

* [v1.20.25 (2026-10-06)](https://github.com/9001/copyparty/releases/tag/v1.20.25) improved shadowing on Windows/MacOS
* [v1.20.19 (2026-07-27)](https://github.com/9001/copyparty/releases/tag/v1.20.19) fixed an FTP-server vuln (upload outside defined volumes)
* [v1.20.17 (2026-07-06)](https://github.com/9001/copyparty/releases/tag/v1.20.17) introduced csp nonces, possibly breaking some javascript-based plugins

## πŸ§ͺ new features

* xvol/xdev now usually doesn't list symlinks that can't be followed 7ce483e9

## 🩹 bugfixes

* generating jxl thumbnails of raw photos would fail in most environments ed0fcd60
* fix some false-positive warnings regarding dangerous shadowing on casefolding filesystems 4bd64d74
* GHSA-hg99-jqfp-rf76 another xvol/xdev joke, not a cause for concern in any realistic scenario 82eab3d2
  * also see the new warning in the [xvol readme section](https://github.com/9001/copyparty#filesystem-guards)
* btrfs: would only nocow same-fs histfolders fa8913c7

## πŸ”§ other changes

* openjpeg (jpeg2000 support in pillow) was removed from all docker images 0dc1cb32
  * because openjpeg is unmaintained and there's some minor unfixed vulns
  * no practical consequences since ffmpeg will handle thumbnailing of those

## 🌠 fun facts

* for the first time in 4 years, the music folder on the demo-server has a new album! [Sunnexo - Netpunk](https://a.ocv.me/pub/demo/music/Sunnexo%20-%20Netpunk/#af-90014daf,sorthref)
  * it is really good, you should [buy it](https://sunnexo.bandcamp.com/album/netpunk)
    * and if you ever get the chance to see Sunnexo live DO IT
* faelnor made a [draw.io plugin](https://codeberg.org/anodal/copyparty-drawio) // [demo vid](https://a.ocv.me/pub/g/2026/10/cpp-drawio.mp4)

----

# πŸ’Ύ what to download?
| download link | is it good? | description |
| -- | -- | -- |
| **[copyparty-sfx.py](https://github.com/9001/copyparty/releases/latest/download/copyparty-sfx.py)** | βœ… the best πŸ‘ | runs anywhere! only needs python |
| [copyparty-en.py](https://github.com/9001/copyparty/releases/latest/download/copyparty-en.py) | βœ… also good | same but english-only, no i18n |
| [a docker image](https://github.com/9001/copyparty/blob/hovudstraum/scripts/docker/README.md) | it's ok | good if you prefer docker πŸ‹ |
| [copyparty.exe](https://github.com/9001/copyparty/releases/latest/download/copyparty.exe) |  ⚠️ [acceptable](https://github.com/9001/copyparty#copypartyexe) | for [win8](https://user-images.githubusercontent.com/241032/221445946-1e328e56-8c5b-44a9-8b9f-dee84d942535.png) or later; built-in thumbnailer |
| [u2c.exe](https://github.com/9001/copyparty/releases/download/v1.20.25/u2c.exe) | ⚠️ acceptable | [CLI uploader](https://github.com/9001/copyparty/blob/hovudstraum/bin/u2c.py) as a win7+ exe ([video](https://a.ocv.me/pub/demo/pics-vids/u2cli.webm)) |
| [copyparty.pyz](https://github.com/9001/copyparty/releases/latest/download/copyparty.pyz) | ⚠️ acceptable | similar to the regular sfx, [mostly worse](https://github.com/9001/copyparty#zipapp) |
| [copyparty-en.pyz](https://github.com/9001/copyparty/releases/latest/download/copyparty-en.pyz) | ⚠️ acceptable | english-only, no smb-server |
| [copyparty32.exe](https://github.com/9001/copyparty/releases/latest/download/copyparty32.exe) | ⛔️ [dangerous](https://github.com/9001/copyparty#copypartyexe) | for [win7](https://user-images.githubusercontent.com/241032/221445944-ae85d1f4-d351-4837-b130-82cab57d6cca.png) -- never expose to the internet! |
| [cpp-winpe64.exe](https://github.com/9001/copyparty/releases/download/v1.16.5/copyparty-winpe64.exe) | ⛔️ dangerous | runs on [64bit WinPE](https://user-images.githubusercontent.com/241032/205454984-e6b550df-3c49-486d-9267-1614078dd0dd.png), otherwise useless |
| [bootable usb](https://a.ocv.me/pub/stuff/edcd001/enterprise-edition/) | ┐(οΎŸβˆ€οΎŸ)β”Œ | a surprisingly useful joke (x86_64) |

* except for [u2c.exe](https://github.com/9001/copyparty/releases/download/v1.20.25/u2c.exe), all of the options above are mostly equivalent
* the zip and tar.gz files below are just source code
* python packages are available at [PyPI](https://pypi.org/project/copyparty/#files)

Related Repositories