Version 3.11 du 09/03/2025- Security : Retry creating restricted $PLUGINSDIR (thanks Sandro Poppi for responsibly disclosing, bug #1315)
This stops a possible privilege escalation. A malicious actor can create the temporary plugins directory ($PLUGINSDIR) at just the right time and fill it with malicious files that the installer might use. Installers running as SYSTEM use C:\windows\temp which is accessible by all users on the system. Any user can use this bug to gain SYSTEM privileges by winning the race condition with an installer that starts as SYSTEM.
- Changed : Retry opening self if there is a sharing error.
- Changed : Support setting source file decoding charset with magic comment.
- Changed : Fixed LicenseBkColor for uninstaller.
- Changed : Handle CHARSET command line parameter in MakeNSISW.
- Changed : Make System/Resource.dll reproducible.
- Changed : Zip2Exe accepts .zip as command line parameter.
- Updated Finnish.
Version 3.10 du 01/04/2024- Fixed LogicLib SafePPO bug.
- NSISdl now supports relative URLs in location redirects.
- Added InstType /UNINSTNOCUSTOM and /UNINSTCOMPONENTSONLYONCUSTOM.
- Fixed bug with SetDetailsPrint lastused and plugins introduced in 3.09.
- Added NSD_CB_Find SelectStringExact support for nsDialogs.
- Fix RTL text in section selection page.