Skip to content

Wavelog

v3.0.0 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 1mo Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

adif analytics cabrillo clublog eqsl ham-radio
+10 more
hamradio hamradio-application hamradio-logbook logbook logging lotw qrzcom self-hosted web web-based-logger

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Completely new multiuser contesting engine and a brand‑new QSL card designer were introduced.

Full changelog

This major release brings a completely new multiuser contesting engine, a brand-new QSL card designer and numerous stability fixes, along with a unified, card-based look across the awards and settings pages. If you run WavelogGate, please make sure to update it alongside this release (https://github.com/wavelog/WaveLogGate/releases/latest).

  • Completely new contesting engine with multiuser/clubstation support (by @HB9HIL)
  • Make sure userdata is deleted with a deleted user (by @HB9HIL)
  • Introduced support for the Wavelog Worker (github.com/wavelog/wavelog_worker) (by @HB9HIL)
  • Fixed a bug in maploading if it is disabled (by @HB9HIL)
  • Fixed bug in QSL Queue Datatable List (by @HB9HIL)
  • Fixed a bug in OQRS search if grouped search was enabled (by @phl0)
  • Changed the grid color in activators maps to align with user configured colors (by @phl0)
  • Enhanced qrz.ru callbook search to also return the user configured image if available (by @phl0)
  • Added a QSL card designer based on works by @twicklund76 (by @AndreasK79, @int2001, @HB9HIL)
  • Advanced Logbook: added label printing right from the actions menu, plus translated the QSL print dialog (by @AndreasK79)
  • Awards UI: gave the award pages a fresh, consistent card-based layout (DXCC, CQ WAZ, ITU, VUCC, WAC, WAE, WPX, WWFF, SIG, DOK, IOTA, POTA, RAC, SOTA, WAPC, 73on73) (by @AndreasK79)
  • Advanced Logbook: made the duplicate-check work across all station locations (by @AndreasK79)
  • Callsign sanitizing made IARU-conformant (dash removed) (by @int2001)
  • Fixed ADIF upload when pressing reload (by @int2001)
  • MY_RIG, MY_ANTENNA now included in ADIF export (by @int2001)
  • Fixed contest operator-switch bug (couldn't switch back) (by @int2001)
  • Settings switches reworked (on/off dropdowns → sliders, cleaner layout, OQRS empty-state + default fixes) (by @int2001)
  • API: ADIF contact-export API now accepts multiple station profiles at once (by @int2001)
  • API: Station profile creation now picks up the QRZ API key (by @int2001)
  • API now respects rate limits when exporting contacts as ADIF (by @int2001)
  • Advanced Logbook: Club members can now mass-edit and mass-delete their own QSOs(by @int2001)
  • Satellite logging: added OMM support for keps (by @int2001)
  • Remove duplicate mode/submode entries from adif_modes (by @kc9uhi)
  • option for active logbook stations (by @kc9uhi)
  • make sure API endpoint with json responses have the correct application/json content-type (by @imlonghao)
  • make sure $stationid is int to prevent SQL injection (by @imlonghao)
  • prevent user run other's stored queries (by @imlonghao)
  • Add more translations for station setup pages (by @cebarobot)

Security Fixes

  • Prevent user execution of other users' stored queries (SQL injection mitigation)
  • Ensure API endpoints return correct application/json Content-Type

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Wavelog

Get notified when new releases ship.

Sign up free

About Wavelog

Webbased Logging Software for Radio Amateurs. Enhanced QSO logging, statistics and maps for your browser.

All releases →

Related context

Beta — feedback welcome: [email protected]