Skip to content

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 19d Backup & Recovery
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 3 known CVEs

Topics

backup cli copy-tool cross-platform deduplication file-copy
+14 more
file-transfer linux macos nas python remote-copy rsync-alternative scp-alternative ssh ssh-transfer synology tar-streaming usb-copy windows

Affected surfaces

auth deps

Summary

AI summary

Added SMB/CIFS transport, reflink deduplication flags, ReFS block cloning, and comprehensive metadata preservation.

Full changelog

fast-copy v3.12.3

A large consolidated release covering everything since the 3.7 line: new
transports and dedup engines, full file and directory metadata preservation,
and a substantial correctness and security hardening pass.

New features

  • SMB/CIFS (smb://, UNC): native transport to and from Windows shares and Azure Files.
  • --index-existing: reflink-dedup a copy against files that already exist at the destination.
  • --dedup-existing: in-place reflink merge of duplicate files already on disk.
  • ReFS block cloning on Windows (real copy-on-write clones).
  • Metadata preservation for directories as well as files (mode/owner/times/xattr/acl, incl. setuid/setgid and the remote-to-local pull path).
  • GUI: SMB credential management and an in-app self-update flow.

Improvements

  • --preserve acl is ~3.5-4x faster (xattr fast-path).
  • Much faster large dedup trees via HDD-aware hashing and a persistent hash cache.
  • Full extent dedup for large files (accurate reclaimed-space reporting).
  • Live progress everywhere: per-phase timing, files/sec, link/verify/index progress.
  • Verify explains the real cause of a failure.
  • Batched SQLite commits; AES-GCM credential encryption (no plaintext).

Bug fixes

  • FAT32/removable destinations copy correctly; an incomplete verify now fails the run.
  • Cross-mount source is warned and skipped instead of crashing.
  • --index-existing edge cases (non-UTF-8 names, hash-algorithm mismatch, empty-file linking).
  • --ssh-no-sftp directory nesting.
  • Security: setuid/setgid privesc hardening, O_NOFOLLOW TOCTOU mitigation, updated crypto deps.

Security Fixes

  • Hardened setuid/setgid privilege escalation path
  • O_NOFOLLOW TOCTOU mitigation
  • Updated cryptographic dependencies to address upstream vulnerabilities

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Fast_copy new release with new features

Get notified when new releases ship.

Sign up free

About Fast_copy new release with new features

All releases →

Related context

Beta — feedback welcome: [email protected]