OctoPrint

🚨 This release includes important security fixes that address vulnerabilities. Update is strongly recommended.

Key highlights in this release:

• Fixed security vulnerabilities including file exfiltration and denial of service attacks
• Added option to configure shell mode for system event subscriptions
• Improved Application Keys plugin functionality
• Added new healthcheck for deprecated global API key usage

Full release notes are found at https://github.com/OctoPrint/OctoPrint/releases

🚨 This release includes important security fixes that address file exfiltration and denial of service vulnerabilities. Update is strongly recommended.

Key highlights in this release:

• Fixed security vulnerabilities including file exfiltration and denial of service attacks
• Added option to disable confirmation dialog when deleting files
• Fixed connection issues with printers like Prusa MK3(s) when "wait for start on connect" is disabled
• Fixed validation error causing deadlock when connecting without available serial ports
• Disabled connect button when no serial ports are available
• Improved security for template translations

Full release notes are found at https://github.com/OctoPrint/OctoPrint/releases

Key highlights in this release:

• Fixed connection issues with printers like Prusa MK3(s) when "wait for start on connect" is disabled
• Added option to disable confirmation dialog when deleting files
• Improved security for template translations
• Fixed validation error causing deadlock when connecting without available serial ports
• Disabled connect button when no serial ports are available

Full release notes are found at https://github.com/OctoPrint/OctoPrint/releases

Key highlights in this release:

• Added support for multi-factor authentication (MFA)
• New Custom Control Manager plugin for configuring custom controls in the UI
• New Health Check plugin to alert you of issues with your environment
• New Upload Manager plugin for bulk file operations
• Improved security and bug fixes

Full release notes are found at https://github.com/OctoPrint/OctoPrint/releases

⚠️ Important security update that fixes vulnerabilities related to XSS and API key management

🔒 Security fixes:

• Fixed vulnerabilities in the login dialog and application key confirmation dialog
• Fixed vulnerability related to API key management that could allow unauthorized access
• Improved security of internal key generation
• Removed version number from discovery to prevent information leakage

🐛 Bug fixes:

• Fixed issues with reverse proxy configuration
• Fixed file list caching behavior
• Fixed plugin installation queuing

Full release notes are found at https://github.com/OctoPrint/OctoPrint/releases

✋ Heads-up

As of Octoprint 1.10.0, you are required to re-enter your password on critical operations (e.g. adding/changing/deleting users and groups, installing plugins, revealing the deprecated global API key, etc).

🐛 Bug fixes

• Fixed a translation string in the German translation.
• Fixed a third-party dependency change that broke a development command.
• Improved the behavior of the "Hide successful prints" filter in the file list.

Full release notes are found at https://github.com/OctoPrint/OctoPrint/releases

This update brings Octoprint from 1.9.2 to 1.9.3

🔒 Security fixes

• Fixed possiblity for a malicious admin to configure a specially crafted GCODE script through the Settings that would allow code execution during rendering of that script

🐛 Bug fixes

• Fix for not being able to extrude/retract from the control panel in the UI after editing the extrusion speed in the printer profile.
• Pin pydantic dependency to 1.10.12. This works around an issue existing in some environments with pydantic version 1.10.13, which was released on September 26 2023. Said issue causes OctoPrint to no longer be able to start.