4 Commits

Author	SHA1	Message	Date
Knienartowicz	be17b3077e	fix(updates): harden Go binary rebuild version and backup path ... Prefer console-local VERSION/package.json for ldflags so a stale root-owned /opt/VERSION cannot pin rebuilt binaries to an old semver. Fall back binary backups to a writable data dir when /opt/rustdesk denies bak writes (EACCES). Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)	2026-09-18 10:18:35 +02:00
UNITRONIX	34ef01e17d	fix(security): harden TLS defaults, device auth, and update privileges ... Require stricter client/server TLS options, centralize device auth on agent APIs, constrain Linux privileged update helpers, and harden filebrowser path checks with supporting audit notes. Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)	2026-08-15 23:28:03 +02:00
UNITRONIX	c219f3be68	fix(security): patch CVE-2026-50575 and harden deps, SSRF, shell exec ... Complete GHSA-3v82-3gf8-fxx8 WebSocket replay fix for soft-deleted peers, bump vulnerable Go/Rust dependencies, and apply CodeQL-driven hardening (OIDC URL validation, path confinement, execFileSync, rate limits).	2026-06-09 02:05:17 +02:00
UNITRONIX	87b0b21b0b	fix(update): privileged Go server binary deploy from Linux panel ... Hardened installs could not replace betterdesk-server in /opt/rustdesk from Settings → Updates. Add a validated sudo deploy helper, extend console update sudoers, and sync privileges before server deploy. Fixes #183	2026-06-09 01:09:11 +02:00