[v1.15.0](https://github.com/syncthing/syncthing/releases/v1.15.0) This release fixes a vulnerability where Syncthing and the relay server can crash due to malformed relay protocol messages (CVE-2021-21404); see https://github.com/syncthing/syncthing/security/advisories/GHSA-x462-89pf-6r5h. This release updates the CLI to use subcommands and adds the subcommands `cli` (previously standalone `stcli` utility) and `decrypt` (for offline verifying and decrypting encrypted folders). With this release we invite everyone to test the "untrusted (encrypted) devices" feature. You should not use it yet on important production data. Thus UI controls are hidden behind a feature flag. For more information, visit: https://forum.syncthing.net/t/testing-untrusted-encrypted-devices/16470 Bugfixes: - [#7198](https://github.com/syncthing/syncthing/issues/7198): Removing a folder and re-adding it again (untrusted) makes it not sync until restart - [#7385](https://github.com/syncthing/syncthing/issues/7385): infinite filesystem recursion due to missing file id - [#7419](https://github.com/syncthing/syncthing/issues/7419): panic "Snapshot(): database is closed" on start after wiping database - [#7429](https://github.com/syncthing/syncthing/issues/7429): "Ignore Patterns" tab disappears after visiting "Folder Defaults" - [#7434](https://github.com/syncthing/syncthing/issues/7434): Non-DNS-like computer name fails creation of HTTPS certificate - [#7451](https://github.com/syncthing/syncthing/issues/7451): strelaysrv v1.14.0 failing to load - [#7466](https://github.com/syncthing/syncthing/issues/7466): Receive-encrypted fails after a while: file with empty block list - [#7469](https://github.com/syncthing/syncthing/issues/7469): .stignore should be ignored in Receive Encrypted folders - [#7474](https://github.com/syncthing/syncthing/issues/7474): Device tries to push ignored files to a remote device in a 3-device setup - [#7481](https://github.com/syncthing/syncthing/issues/7481): Versioning help strings are not displayed in the GUI - [#7509](https://github.com/syncthing/syncthing/issues/7509): Sharing the first folder to an untrusted device on an established connection sends plain-text Enhancements: - [#6566](https://github.com/syncthing/syncthing/issues/6566): Ship stcli in main package - [#7457](https://github.com/syncthing/syncthing/issues/7457): Remove sub-second precision from the REST API rest/stats/device. - [#7514](https://github.com/syncthing/syncthing/issues/7514): Increase default strelaysrv network buffer size Other issues: - [#4719](https://github.com/syncthing/syncthing/issues/4719): Package stcli as Debian package - [#7199](https://github.com/syncthing/syncthing/issues/7199): Build script -no-upgrade handling is unintuitive