Releases · sparkle-project/Sparkle · GitHubのページにて、Macアプリにアップデート管理機能を提供してくれる「Sparkle 2.9.6」が公開されていました。
Changes:
- Harden safety of installer moving the download archive (#2898) (Zorg, Joshua Rogers)
- Don’t copy progress tool for root user (#2897) (Zorg, Joshua Rogers)
- Reject package based installs when signing validation failed (#2895) (Zorg)
This release contains a couple of security fixes reported by @MegaManSec including a high-complex symlink security fix, and a privilege escalation fix affecting processes running as root using Sparkle (like running sparkle-cli as root). Details are updated in #2838.
Please also check 2.9.5, 2.9.4, 2.9.3, 2.9.2, 2.9.1, and 2.9.0 for previous changes.
コメント