nUpdate v3.4.1
NOTICE: It is highly recommended to use the newest version of the library together with the newest one of nUpdate.Administration to ensure the mechanisms for closing a possible vulnerability are working.
You may use the newest version with an elder one for compatiblity reasons, but it is NOT recommended to do so. ARP-spoofing or a server compromising could lead to a remote code execution which is a major security flaw.
Although the package content itself is verified through a signature, the scripts of the update operations were not to this point which makes this vulnerable.
nUpdate v3.4.1 fixes this problem to make the operations part of the package content and ensure no problems can occur.
- Fixed heavy security issue allowing a possible remote code execution
- Fixed a vulnerability due to an older version of DotNetZip
- Added windows event log usage to update installer for service applications
- Fixed a bug that would recognize the app running as service although it is not when installing an update
- Added the possibility to run operations before replacing files or folders
- Added the "Replace files/folders" operation to the dialog for package editing
- Added rollout conditions
- Added WPF update installer
- Fixed problems with unhandled exceptions in the update installer
- Updated all dependencies to the newest version
- Added Italian as language
- Improved the code to prevent further bugs
- Fixed many smaller bugs