This release includes 2 security fixes for security teams reviewing exposed deployments.
Topics
+10 more
Affected surfaces
Summary
AI summaryCompletely new multiuser contesting engine and a brand‑new QSL card designer were introduced.
Full changelog
This major release brings a completely new multiuser contesting engine, a brand-new QSL card designer and numerous stability fixes, along with a unified, card-based look across the awards and settings pages. If you run WavelogGate, please make sure to update it alongside this release (https://github.com/wavelog/WaveLogGate/releases/latest).
- Completely new contesting engine with multiuser/clubstation support (by @HB9HIL)
- Make sure userdata is deleted with a deleted user (by @HB9HIL)
- Introduced support for the Wavelog Worker (github.com/wavelog/wavelog_worker) (by @HB9HIL)
- Fixed a bug in maploading if it is disabled (by @HB9HIL)
- Fixed bug in QSL Queue Datatable List (by @HB9HIL)
- Fixed a bug in OQRS search if grouped search was enabled (by @phl0)
- Changed the grid color in activators maps to align with user configured colors (by @phl0)
- Enhanced qrz.ru callbook search to also return the user configured image if available (by @phl0)
- Added a QSL card designer based on works by @twicklund76 (by @AndreasK79, @int2001, @HB9HIL)
- Advanced Logbook: added label printing right from the actions menu, plus translated the QSL print dialog (by @AndreasK79)
- Awards UI: gave the award pages a fresh, consistent card-based layout (DXCC, CQ WAZ, ITU, VUCC, WAC, WAE, WPX, WWFF, SIG, DOK, IOTA, POTA, RAC, SOTA, WAPC, 73on73) (by @AndreasK79)
- Advanced Logbook: made the duplicate-check work across all station locations (by @AndreasK79)
- Callsign sanitizing made IARU-conformant (dash removed) (by @int2001)
- Fixed ADIF upload when pressing reload (by @int2001)
- MY_RIG, MY_ANTENNA now included in ADIF export (by @int2001)
- Fixed contest operator-switch bug (couldn't switch back) (by @int2001)
- Settings switches reworked (on/off dropdowns → sliders, cleaner layout, OQRS empty-state + default fixes) (by @int2001)
- API: ADIF contact-export API now accepts multiple station profiles at once (by @int2001)
- API: Station profile creation now picks up the QRZ API key (by @int2001)
- API now respects rate limits when exporting contacts as ADIF (by @int2001)
- Advanced Logbook: Club members can now mass-edit and mass-delete their own QSOs(by @int2001)
- Satellite logging: added OMM support for keps (by @int2001)
- Remove duplicate mode/submode entries from adif_modes (by @kc9uhi)
- option for active logbook stations (by @kc9uhi)
- make sure API endpoint with json responses have the correct application/json content-type (by @imlonghao)
- make sure $stationid is int to prevent SQL injection (by @imlonghao)
- prevent user run other's stored queries (by @imlonghao)
- Add more translations for station setup pages (by @cebarobot)
Security Fixes
- Prevent user execution of other users' stored queries (SQL injection mitigation)
- Ensure API endpoints return correct application/json Content-Type
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Wavelog
Webbased Logging Software for Radio Amateurs. Enhanced QSO logging, statistics and maps for your browser.
Related context
Related tools
Beta — feedback welcome: [email protected]