Release v26.10.11

26.10.11

• Fixed command injection through note filenames in the external Git version viewer
  (CWE-78, reported by Dilanka Kaushal Hewage / r3vpwnx)
  • External Git log commands now run directly without an implicit shell; %notePath%
    must be a separate argument. Configurations using shell syntax need a wrapper script
    that accepts the note path as an argument
  • Security advisory: GHSA-jp2h-69pm-p69c
• QOwnNotes for Android is now available on
  F-Droid
• There was a new release of QOwnNotes for Android,
  v1.6.0
  • Copy notes to an existing or new subfolder, or duplicate them in the same folder; move and
    copy also support multiple selected notes, with folder actions available when Use subfolders
    is enabled for the account
  • Share notes through public Nextcloud links, optionally with password protection and editing
    permission; links can be copied, sent, or opened, and passwords changed or removed later
  • Reorder checkbox list items in the note preview by dragging their grip handles, moving nested
    items with their parent within the same list and scrolling automatically near the note's edges
• There was a new release of QOwnNotes TUI,
  v1.3.2
  • Updated rustls, rustls-webpki, and webpki-roots to address six security advisories
    in the HTTPS dependencies
• There was a new release of QOwnNotes TUI,
  v1.3.1
  • Fixed Windows-style line endings and embedded ASCII control characters disrupting note
    rendering and leaving text from previous notes visible in the viewer and editor
• The 26.10.2 release of
  QOwnNotes for Nextcloud adds translations
  and improves the note list and editor
  • The web interface, admin settings, and Nextcloud integrations now follow the user's Nextcloud
    language, with German, Chinese (Simplified), Russian, Italian, Portuguese (Brazil), Polish,
    French, and Spanish translations
  • Notes whose title starts with an emoji can show it as their note-list icon, even if QOwnNotes
    Desktop removed it from the file name; conflict copies are marked with a warning icon
  • Fixed the editor cursor being hard to see in dark mode

Released files

• QOwnNotes-x86_64.AppImage: Portable Linux AppImage build with Qt 6
• QOwnNotes-x86_64.AppImage.sha256sum: SHA-256 checksum for the AppImage
• QOwnNotes-amd64.snap: Linux Snap build with Qt 6
• QOwnNotes-amd64.snap.sha256sum: SHA-256 checksum for the Qt 6 Snap package
• QOwnNotes-Qt5-amd64.snap: Linux Snap build with Qt 5 for older environments
• QOwnNotes-Qt5-amd64.snap.sha256sum: SHA-256 checksum for the Qt 5 Snap package
• QOwnNotes.zip: Windows ZIP package built with Qt 6
• QOwnNotes.zip.sha256: SHA-256 checksum for the Qt 6 Windows ZIP package
• QOwnNotes.zip.sha256sum: Alternative SHA-256 checksum file for the Qt 6 Windows ZIP package
• QOwnNotes.dmg: macOS disk image built with Qt 6
• QOwnNotesQt5.dmg: macOS disk image built with Qt 5 for older systems