Release 26.07.5

Automated release created for tag 26.07.5

• Direct download link:
• In repos:

Changelog

• Prevent failed snapshot cleanup from deleting files through a mounted copy
  of the system root, while safely removing temporary mounts when possible.

Release 26.07.4

Automated release created for tag 26.07.4

• Direct download link:
• In repos:

Changelog

• Allow snapshot creation with squashfs-tools versions that do not provide
  optional throttling or percentage-progress controls.

Release 26.07.3

Automated release created for tag 26.07.3

• Direct download link:
• In repos:

Changelog

• Fix error dialog titles in English by removing a broken en_US translation
  that replaced "Error" with an unrelated compression message.
• Allow snapshot work directories on compatible NTFS and exFAT mounts when
  they support the file operations the snapshot actually uses.

Release 26.07.2

Automated release created for tag 26.07.2

• Direct download link:
• In repos:

Changelog

• Stop reporting a successful snapshot when required ISO steps fail;
  checksum, boot, initrd, package-list, and template errors now stop the run.
• Clean up the snapshot work area immediately after failed ISO steps, instead
  of leaving temporary mounts and files behind until the program exits.
• Run the configured text editor directly instead of through a shell, closing
  a command-injection risk from editor settings and desktop-file entries.
• Make preempt checksum handling safer by using a private temporary directory
  for each snapshot run.
• Probe snapshot work directories for the required file operations, allowing
  compatible shared mounts while rejecting unsuitable locations early.

Release 26.07.1

Automated release created for tag 26.07.1

• Direct download link:
• In repos:

Changelog

• Keep the authentication prompt alive across the whole snapshot run
  so it only prompts once, even after long operations.
• Add amd/intel-ucode injection into initrd, and make the initrd
  helper scripts safer with better module path handling.
• Improve mksquashfs progress: CLI shows percentage on a single
  updating line; sync GUI progress on carriage returns.
• Harden snapshot helper scripts against symlink attacks and path
  traversal in the privilege-escalated subcommands.
• Remove passwordless polkit access to snapshot-lib actions, closing
  a privilege-escalation path.
• Unify codebase with the Arch branch

Release 26.07

Automated release created for tag 26.07

• Direct download link:
• In repos:

Changelog

• Fix config and exclude-list files created during a snapshot being
  root-owned and uneditable by the regular user.
• Fix the snapshot process failing when a cleanup path contains spaces.
• Fix logging being silently lost after the output display is closed
  during a snapshot operation.
• Fix misleading disk-space warnings when an exclude pattern resolves
  to the root directory.
• Add --nvidia CLI flag to iso-snapshot-cli, which adds the
  xorg=nvidia boot option for NVIDIA hardware.
• Harden command execution: file names and boot options are passed as
  arguments instead of embedded in shell commands, preventing injection.
• Improve log archiving: each run captures only its own log and uses
  secure directories.
• Fix the application exiting when the user cancels the administrator
  authentication dialog; it now returns to the settings page so the
  snapshot can be started again.
• Skip the startup cleanup helpers when there is no leftover state
  from a previous interrupted run.
• Require administrator authentication for writing the live-files
  version/lsb-release templates, closing a passwordless path to
  tampering with distro metadata baked into future snapshots.
• Fix a denied re-authentication going unnoticed when the work
  directory needed to be relocated for space, or when consecutive
  privileged steps ran back-to-back after a cancelled prompt.
• Fix the privileged helper's own internal errors (unknown or missing
  command) being mistaken for a cancelled authentication.

Release 26.06arch

Automated release created for tag 26.06arch

• Direct download link:
• In repos:

Changelog

• Fix exclude size double counting
• Avoid symlink glob dereference in excludes

Release 26.05arch

Automated release created for tag 26.05arch

• Direct download link:
• In repos:

Changelog

• Fix exclude size double counting
• Avoid symlink glob dereference in excludes

Release 26.05.2

Automated release created for tag 26.05.2

• Direct download link:
• In repos:

Changelog

• Tighten up the privileged helper script for safer file handling.
  • Improve how configuration and log files are checked before they are
    copied or have their ownership adjusted.

Release 26.05.1

Automated release created for tag 26.05.1

• Direct download link:
• In repos:

Changelog

• Add amd/intel-ucode injection into initrd if uc-tool is available