Skip to content

Metalama 2025.1.18

Choose a tag to compare

View all tags
@gfraiteur gfraiteur released this 30 Jun 15:58
release/2025.1.18
0346dff

Metalama 2025.1.18 is a security release based on 2025.1.17, plus the following changes.

It backports two security fixes from the 2026.1 line and updates the End-User License Agreement.

This release updates Metalama.Compiler to 2025.1.12 (build-infrastructure updates only).

Security

  • #1650 (GHSA-m6wq-39m7-9xpp) Relocated the load-and-execute temp directory off world-writable /tmp on Unix, preventing local DLL planting / code execution on shared and CI machines.
  • #1651 (GHSA-h26j-4vp7-x9w2) Enforced a per-type allow-list on the design-time RPC JSON deserialization, removing an unsafe-deserialization (local code execution) primitive over the Visual Studio named pipe.

Other

  • #1718 Updated the End-User License Agreement to version v2026-Q3.

Resources

Assets 2
Loading