Kopia v0.10.1 has been released:
This is a recommended upgrade for all users and it fixes moderate-impact CSRF security vulnerability that affected self-hosted website UI (but not regular CLI commands, Kopia UI desktop app or Kopia Repository Server usage withot UI component).
Please report any issues here or on GitHub.
If you have specific security questions, contact me privately at security@kopia.io
Ubuntu/Debian repository seems to have been broken by the new release, I’m getting this error now
W: No Hash entry in Release file /var/lib/apt/lists/partial/packages.kopia.io_apt_dists_stable_InRelease
E: The repository ‘http://packages.kopia.io/apt stable InRelease’ provides only weak security information.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
That APT issue should be fixed for stable and testing. Unstable will be fixed momentarily.
Thanks for reporting the issue!