Skip to content

v0.6.0

Latest

Choose a tag to compare

@koxt2 koxt2 released this 17 Sep 07:10
· 2 commits to main since this release

[v0.6.0] - 2026-04-28

Changed

  • Privileged ddrescue helper now derives ownership from PKEXEC_UID
  • Removed the Polkit allow_gui override

Fixed

  • Hardened privileged operations against unsafe device paths and symbolic-link attacks
  • Added validation for device paths, output locations, ownership IDs, and temporary directories
  • Image and mapfile creation now uses private temporary directories and atomic moves