Gharmonize v1.4.3

Security fix

Creating conversion jobs from server-local files now requires an administrator session, just like browsing and probing those files. Previously, a user could submit a known relative filename directly to the job API without passing the local-file administrator check.

The check applies in both public-access mode and temporary-access mode. Approved temporary users can still upload their own files and use remote URLs, but cannot create jobs from the server's local media directory. Normal uploads and remote downloads are unchanged.

Thanks to @Artur12555 for catching the missing check and reporting it.

Disc Ripper progress connection

• Open the protected progress stream only after confirming an administrator session with the server.
• Close the connection on logout, including logout in another browser tab.
• Recheck administrator access before reconnecting after a dropped connection, instead of repeatedly requesting a protected stream with an expired session.
• Keep idle progress connections alive with regular heartbeats and release disconnected clients and timers.

Windows code signing status — please read

The Windows files in Gharmonize v1.4.3 do not carry a trusted Authenticode signature. The SignPath Foundation production code-signing certificate is still pending. Self-signed test certificates are not used for this public release.

This applies to the Setup installer, the standalone Portable EXE, and the application executable inside the Portable Folder ZIP. Windows may display an unknown-publisher or SmartScreen warning; managed Windows security policies may block execution.

Download only from this repository's official Releases page and verify the published checksums and GitHub artifact attestations. The GPG-signed checksum manifest verifies release integrity but is not a Windows Authenticode signature. Do not disable Windows security protections or install a test certificate to run this release.

Downloads

Windows Setup, Portable EXE, and Portable Folder packages are published alongside the Linux AppImage and its .zsync update metadata by the automated release workflow. Container images are published separately to ghcr.io/g-grbz/gharmonize:1.4.3 and ghcr.io/g-grbz/gharmonize:latest by the Docker workflow.

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

See the Gharmonize Code Signing Policy and Privacy Policy.

Full Changelog: v1.4.2...v1.4.3