Skip to content

DBine v1.2.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Oct 03:50
v1.2.2
3a91fa2

DBine v1.2.2 installers.

Fixes

  • Security: critical vulnerability in ZIP handling fixed. On October 28 a critical vulnerability was published in zip, the library DBine uses to read and write ZIP-based files: Excel imports and exports, and the download of the AI assistant's built-in model (GHSA-m665-v7pm-7grj). A specially crafted archive could show different contents depending on how it was read. This version moves every part of DBine to the fixed library; it ships a few hours after 1.2.1 for that reason alone, so updating is recommended.
  • Trino and Presto, security: a column type nested deeper than any real schema (as a malicious server could send) is shown as it came instead of being parsed level by level, so it can no longer crash DBine.

Downloads

  • Windows: -setup.exe (requires WebView2, included in Windows 10/11).
  • macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
  • Linux: .AppImage (portable), .deb or .rpm.
  • Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
  • Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.

Version 0.1.4 and later receive it through the automatic update.

  • macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
  • Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
  • Each engine's driver (except SQLite) is downloaded the first time you connect.
Assets 22
Loading