Starstruk Logo MarkStarstruk

v1.20.16

louislam/uptime-kumav1.20.16May 26, 2026by 9001

AI Summary

This release introduces s6 service notification protocol support and includes numerous improvements to audio handling, file sharing, and Docker compatibility, including a fix for a recent XSS vulnerability.

Key Highlights

  • Added s6 service notification protocol support
  • Fixed XSS vulnerability (CVE-2026-27948)
  • Improved OPDS compatibility
  • Added audio playback for MKA files

Breaking Changes

  • Docker arm32 build of the iv image has been removed

New Features

  • OPDS compatibility improvements
  • Read-access users can create get-only shares
  • Rename top-level folder in download-as-zip/tar
  • Logarithmic frequency scale for music spectrograms
  • Custom name/path for ffmpeg/ffprobe binaries
  • Audio playback for MKA files

Full Release Notes

<img src="https://github.com/9001/copyparty/raw/hovudstraum/docs/logo.svg" width="250" align="right"/>

* read-only demo server at https://a.ocv.me/pub/demo/
* [docker image](https://github.com/9001/copyparty/tree/hovudstraum/scripts/docker) β•± [similar software](https://github.com/9001/copyparty/blob/hovudstraum/docs/versus.md) β•± [client testbed](https://cd.ocv.me/b/)

there is a [discord server](https://discord.gg/25J8CdTT6G) with an `@everyone` in case of future important updates, such as [vulnerabilities](https://github.com/9001/copyparty/security) (most recently 2026-03-08)

## recent important news

* [v1.20.9 (2026-02-25)](https://github.com/9001/copyparty/releases/tag/v1.20.9) fixed [CVE-2026-27948](https://github.com/9001/copyparty/security/advisories/GHSA-62cr-6wp5-q43h) (XSS)

## πŸ§ͺ new features

* #1463 opds: improved compatibility with various clients (thx @kamaeff!) 9068ec6a
* #1485 users with read-access can now create get-only shares (thx @Scotsguy!) 0bb80e92
* #1466 support the s6 service notification protocol (thx @mobin-2008!) 8c201b84 ca406472
* download-as-zip/tar: the toplevel folder can be renamed with url-param `&name=foo` or entirely removed with `&name` cc5420a3
* #1487 option to generate music spectrograms with logarithmic frequency scale (thx @9hax!) 83dc20f3
* option to set custom name/path for ffmpeg/ffprobe binaries 5e806ec1
* #1489 audio playback of mka files

## 🩹 bugfixes

* #1480 #1482 fix get-only shares not expiring if the creator is removed (thx @celinke97 and @Scotsguy!) 3b53a228
* #1474 toggling between cropped/fullsize coverart for music didn't work 926c6e81
* #1470 files from the year 30828 would break file listing 27031f73
* #1494 fix js-crash when dragging a pic from the gallery out of the browser (thx @icxes!) 7d81b9e8
* "fancy markdown editor" didn't work on phones 6183540c
* improve signal handling f4f97b6c
  * if I messed something up then `--sig-thr` or send 7x sigterm

## πŸ”§ other changes

* docker: the arm32 build of the iv image has graduated 6e75faa6
  * `copyparty/iv` is now only available for `i386` / `x86_64` / `aarch64`
* docker: rawpy is no longer bundled; now using libraw directly 348b4bb5
  * creating thumbnails of .raw photos is now MUCH slower but quality is also much better
* partyfuse: switch to mfusepy; adds fuse3 support and improves performance b2401ff1
* additional advisory tiers for use with the vulnerability-checker 4e9ad781
* clarify behavior of `xvol` regarding permissions e3271830
* packaging/docs:
  * #1479 freebsd: fix deps in rc.d (thx @Kansattica!) f432ef6d
  * #1458 macos docs (thx @ilotoki0804!) d7eb556c

## 🌠 fun facts

* there will be a tiny handful of copyparty stickers at dokomi this weekend

----

# πŸ’Ύ what to download?
| download link | is it good? | description |
| -- | -- | -- |
| **[copyparty-sfx.py](https://github.com/9001/copyparty/releases/latest/download/copyparty-sfx.py)** | βœ… the best πŸ‘ | runs anywhere! only needs python |
| [copyparty-en.py](https://github.com/9001/copyparty/releases/latest/download/copyparty-en.py) | βœ… also good | same but english-only, no i18n |
| [a docker image](https://github.com/9001/copyparty/blob/hovudstraum/scripts/docker/README.md) | it's ok | good if you prefer docker πŸ‹ |
| [copyparty.exe](https://github.com/9001/copyparty/releases/latest/download/copyparty.exe) |  ⚠️ [acceptable](https://github.com/9001/copyparty#copypartyexe) | for [win8](https://user-images.githubusercontent.com/241032/221445946-1e328e56-8c5b-44a9-8b9f-dee84d942535.png) or later; built-in thumbnailer |
| [u2c.exe](https://github.com/9001/copyparty/releases/download/v1.20.2/u2c.exe) | ⚠️ acceptable | [CLI uploader](https://github.com/9001/copyparty/blob/hovudstraum/bin/u2c.py) as a win7+ exe ([video](https://a.ocv.me/pub/demo/pics-vids/u2cli.webm)) |
| [copyparty.pyz](https://github.com/9001/copyparty/releases/latest/download/copyparty.pyz) | ⚠️ acceptable | similar to the regular sfx, [mostly worse](https://github.com/9001/copyparty#zipapp) |
| [copyparty-en.pyz](https://github.com/9001/copyparty/releases/latest/download/copyparty-en.pyz) | ⚠️ acceptable | english-only, no smb-server |
| [copyparty32.exe](https://github.com/9001/copyparty/releases/latest/download/copyparty32.exe) | ⛔️ [dangerous](https://github.com/9001/copyparty#copypartyexe) | for [win7](https://user-images.githubusercontent.com/241032/221445944-ae85d1f4-d351-4837-b130-82cab57d6cca.png) -- never expose to the internet! |
| [cpp-winpe64.exe](https://github.com/9001/copyparty/releases/download/v1.16.5/copyparty-winpe64.exe) | ⛔️ dangerous | runs on [64bit WinPE](https://user-images.githubusercontent.com/241032/205454984-e6b550df-3c49-486d-9267-1614078dd0dd.png), otherwise useless |
| [bootable usb](https://a.ocv.me/pub/stuff/edcd001/enterprise-edition/) | ┐(οΎŸβˆ€οΎŸ)β”Œ | a surprisingly useful joke (x86_64) |

* except for [u2c.exe](https://github.com/9001/copyparty/releases/download/v1.20.2/u2c.exe), all of the options above are mostly equivalent
* the zip and tar.gz files below are just source code
* python packages are available at [PyPI](https://pypi.org/project/copyparty/#files)