Toto je nejnovější verze. · Datum vydání:
Instalační soubory 10.6
| Architektura | Typ | Pro koho | Velikost souboru | Stáhnout | SHA256 |
|---|---|---|---|---|---|
| 64bit | EXE (Inno Setup) · en-US | Všichni uživatelé | — | github.com | VirusTotal |
| ARM64 | EXE (Inno Setup) · en-US | Všichni uživatelé | — | github.com | VirusTotal |
Odkaz a SHA256 pocházejí z komunitního manifestu Windows Package Manageru. Před spuštěním porovnejte hash staženého souboru.
Seznam změn
Servy v10.6 replaces handle64.exe / handle64a.exe with native P/Invoke, eliminating all third-party executable dependencies and licensing constraints. This release also focuses on hardening security across the database, ACLs, IPC, resource extraction, vault ownership, and service-account grants.
Full Changelog
- feat(core): replace handle64.exe / handle64a.exe with native Restart Manager P/Invoke (#7578)
- fix(security): address security findings across vault hardening, log writing, executable resolution, and host IPC (#7541)
- fix(core): purge non-admin vault entries and re-grant service account permissions on elevated starts (#7526)
- fix(core): enforce reparse-point and final-path validation in RotatingStreamWriter (#7527)
- fix(core): enforce vault binary precedence over application directory lookups in Release builds (#7528)
- fix(core): improve vault binary extraction security and DACL rebuilding (#7530)
- fix(core): revoke legacy recovery folder access and sanitize counter file imports (#7532)
- fix(core): enforce final path equality and hard-link limits in PathSecurityGuard (#7533)
- fix(core): remove unused HasCopiedResources property from ResourceHelper (#7554)
- fix(core): remove unused HardenServiceAccountsAsync method from hardener interface (#7551)
- fix(core,service): align 8.3 short-path validation in ProcessLauncher with PathSecurityGuard (#7553)
- fix(core): remove unused LocalPipeServer overload and clean up duplicate XML documentation (#7562)
- fix(infra): encrypt HeartbeatUrl in database by marking it as a sensitive field (#7579)
- fix(host): pin named pipe client process identity at connection time to prevent PID reuse races (#7534)
- fix(host): enforce 256 KB request payload cap and dynamic buffer growth for host named pipes (#7536)
- fix(host): add first-instance probing and diagnostic warnings for named pipe creation in LocalPipeServer (#7537)
- fix(host,manager): validate ActiveStdoutPath and ActiveStderrPath before storage and file inspection (#7535)
- fix(ui): fix dead tag name fallback logic in update check helper (#7522)
- fix(manager): prevent full-file enumeration in LogTailer non-UTF-8 history load when maxLines is zero (#7523)
- fix(manager): clean up unused local variables and redundant conditions in LogTailer UTF-16 history parsing (#7524)
- fix(cli): enforce owner verification and secure permissions on ProtectedKeyProvider DPAPI keys (#7531)
- fix(cli): enforce early elevation check before bootstrapping vault database (#7573)
- fix(dump): create dump archives with hardened ACLs and secure hash sidecar generation (#7538)
- fix(notifications): retain full bracketed message text in toast notification body
- fix(notifications): add Event ID filtering and per-run caps to failure notification scheduled tasks (#7539)
- fix(setup): validate script integrity and file permissions for taskschd scheduled tasks (#7529)
