Skip to content

v1.11.2

Choose a tag to compare

@ok ok released this 28 Sep 18:42
· 168 commits to main since this release
d28af70

A bug-fix release. Closes security gaps and finishes two one-time cleanups
that stalled or never ran on older profiles.

Fixed

  • The shared-folder index is now encrypted at rest on every profile. On
    profiles whose index had been compacted, the one-time move to the encrypted
    index failed on every start and left the previous, unencrypted copy in place.
  • Mirall frees storage left behind by older versions. Profiles that
    mirrored a folder before 1.10 could hold hundreds of megabytes of identical
    copies of the same folder record. The extra copies are removed once, the
    next time Mirall starts. Your folders and settings are unaffected.

Security

  • Only verified members can affect a space's members and downloads.
    Someone outside a space who knew its network address could stall your
    downloads or send messages that changed who appeared to be a member.
    Mirall now takes these only from members it has verified.
  • You can see whether the person who invited you has been verified.
    While your invite is pending, they are marked "Unverified" until Mirall
    confirms they belong to the space.
  • The installed app can no longer be started in a debugging mode or
    with modified files.

Full Changelog: v1.11.1...v1.11.2