security(update): stage binary replacement at an unpredictable, exclusive path - #751

Merged

kevincodex1 merged 19 commits into

Gitlawb:mainfrom

PierrunoYT:fix/windows-updater-staging-path-overwrite

Aug 11, 2026

Commits on Aug 11, 2026

security(update): stage binary replacement at an unpredictable, exclusive path

authored and
Vasanthdev2004
committed
da8d425
security(update): bind the binary swap to the staged object, not its pathname

PierrunoYT
authored and
Vasanthdev2004
committed
09cfb6a
security(update): close remaining updater staging races

authored and
Vasanthdev2004
committed
f479378
fix(update): address staging review findings

PierrunoYT
authored and
Vasanthdev2004
committed
9787810
fix(update): verify promoted object identity safely

authored and
Vasanthdev2004
committed
06c9a9c
fix(update): preserve promotion recovery signals

authored and
Vasanthdev2004
committed
04f6854
fix(update): keep the recovery copy a failed restore promised

authored and
Vasanthdev2004
committed
dccccb5
fix(update): stop the recovery copy from being destroyed by the next attempt

authored and
Vasanthdev2004
committed
a7b03c1
fix(update): keep the recovery copy when its marker cannot be established

authored and
Vasanthdev2004
committed
982fe39
fix(update): preserve Windows recovery state across retries

authored and
Vasanthdev2004
committed
42c4896
fix(update): watch every recovery path and never orphan a partial marker

PierrunoYT
authored and
Vasanthdev2004
committed
8c42f3d
fix(update): tolerate the fail-closed outcome of a fully-unlinked substitution

PierrunoYT
authored and
Vasanthdev2004
committed
5f8480c
fix(update): surface unverified recovery path, match .old case-insensitively

authored and
Vasanthdev2004
committed
558defe
fix(update): bound Windows recovery cleanup

authored and
Vasanthdev2004
committed
9670f83
fix(update): secure Windows recovery cleanup

authored and
Vasanthdev2004
committed
e2a11e6
fix(update): terminate Windows rename paths

authored and
Vasanthdev2004
committed
aee337c
test(update): allow namespaced recovery copies

authored and
Vasanthdev2004
committed
e1dd03c
fix(update): bind Windows cleanup to handles, drop dead cleanup API

authored and
Vasanthdev2004
committed
a99fe24
fix(update): bind Windows recovery to handles and bound its state

authored and
Vasanthdev2004
committed
db33a32

Navigation Menu

Uh oh!

security(update): stage binary replacement at an unpredictable, exclusive path - #751

security(update): stage binary replacement at an unpredictable, exclusive path#751
kevincodex1 merged 19 commits into
Gitlawb:mainfrom
PierrunoYT:fix/windows-updater-staging-path-overwrite

Commits on Aug 11, 2026

security(update): stage binary replacement at an unpredictable, exclusive path

security(update): bind the binary swap to the staged object, not its pathname

security(update): close remaining updater staging races

fix(update): address staging review findings

fix(update): verify promoted object identity safely

fix(update): preserve promotion recovery signals

fix(update): keep the recovery copy a failed restore promised

fix(update): stop the recovery copy from being destroyed by the next attempt

fix(update): keep the recovery copy when its marker cannot be established

fix(update): preserve Windows recovery state across retries

fix(update): watch every recovery path and never orphan a partial marker

fix(update): tolerate the fail-closed outcome of a fully-unlinked substitution

fix(update): surface unverified recovery path, match .old case-insensitively

fix(update): bound Windows recovery cleanup

fix(update): secure Windows recovery cleanup

fix(update): terminate Windows rename paths

test(update): allow namespaced recovery copies

fix(update): bind Windows cleanup to handles, drop dead cleanup API

fix(update): bind Windows recovery to handles and bound its state