Skip to content

v4.4.50

Choose a tag to compare

View all tags
@anionDev anionDev released this 10 Oct 10:10
· 80 commits to main since this release
v4.4.50
This tag was signed with the committer’s verified signature.
anionDev Marius Göcke
GPG key ID: 72A38C3476BE272F
Verified
Learn about vigilant mode.
47d6424
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release notes

Changes

  • non-code-update
  • Collected all findings in the findings-table in "Other/Reference/Reference.md" with ids of the form "-" (SEC, BUG, PER, OTH).
  • Fixed an argument-injection in "scruncommandinfolder": an actual folder which contains spaces could add further arguments to the command and thereby bypass the base-folder- and excluded-folder-restriction.
  • Secrets (twine-token, NuGet-api-key, NuGet-source-password, openssl-passwords, 7z-password) are not written to the build-log and to exception-messages anymore.
  • Deleting a folder does not change the permissions of the targets of symbolic links inside it anymore.
  • Fixed several bugs in "ScriptCollectionCore" (file-permission-parsing, inverted symlink-flag of "set_owner", endless recursion when checking registry-images, git-helper-functions, iso-creation, extraction of password-protected archives) and in "ProcessesRunner".
Assets 4
Loading