You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
⏳ Please be patient, the builds are still running. New versions of Cryptomator can be found here in a few moments. ⏳
What's Changed
Security Fixes 🚨
Deletion of protected resources: The Cryptomator MSI installer is build with the WiX toolkit. Installers build with a toolkit version below 3.14.1 can be used to delete system directories by using Directory junctions. CVE-2024-29187
Local Privilege Escalation: The Cryptomator EXE installer is build wiht the WiX toolkit. Installers build with a toolkit version below 3.14.1 can be used to execute arbitrary binaries using by using the Windows temp directory CVE-2024-29188
We advise to remove the vulnerable installers from the system. Already cached installers are removed when installing this update.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
⏳ Please be patient, the builds are still running. New versions of Cryptomator can be found here in a few moments. ⏳
What's Changed
Security Fixes 🚨
We advise to remove the vulnerable installers from the system. Already cached installers are removed when installing this update.
Full Changelog: 1.12.3...1.12.4
As usual, the GPG signatures can be checked using our public key
5811 7AFA 1F85 B3EE C154 677D 615D 449F E6E6 A235
.This discussion was created from the release 1.12.4 (Windows Only).
Beta Was this translation helpful? Give feedback.
All reactions