Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
(CVE-2025-23021, reported by SivertPL @__tfr)
Added security checks to prevent mounting VeraCrypt volumes on system directories (like /usr/bin) or directories in the user's PATH, which could theoretically allow execution of malicious binaries instead of legitimate system binaries.
Key changes:
- Block mounting on protected system directories (/usr, /bin, /lib, etc.)
This restriction cannot be overridden
- Block mounting on directories present in user's PATH environment variable
This can be overridden with --allow-insecure-mount flag
- Add visual warnings (red border, "[INSECURE MODE]") when mounting on PATH directories is allowed
- Handle symlinks properly when checking paths
- Add new error messages for blocked mount points
To override PATH-based restrictions only (system directories remain protected):
veracrypt --allow-insecure-mount [options] volume mountpoint
Security Impact: Low to Medium
The attack requires either:
- User explicitly choosing a system directory as mount point instead of using VeraCrypt's default mount points
- Or attacker having both filesystem access to modify favorites configuration AND knowledge of the volume password
Default mount points are not affected by this vulnerability.
Security: CVE-2025-23021
|
|
Update Windows drivers.
|
|
|
|
drivers.
|
|
left from old versions. Increment version to 1.26.15.
|
|
|
|
|
|
for commit 715380afbbe3d2fe0e880c4b8b708bce04e456ad
|
|
翻译
|
|
drivers.
|
|
|
|
|
|
|
|
* Update Language.zh-cn.xml
修正错误
* Update Language.zh-cn.xml
|
|
|
|
* Implement Language selection into settings
Initial commit to create a new tab in PreferencesNotebook for
Language selection. By default, if nothing is chosen, it uses the
current behaviour of using the language from system environment
variables. If another language is chosen from the settings, it is
saved into the Configuration.xml and this is used instead.
* Fix SetStringSelection() assert issue on macOS
* Add header include to fix build
* Add current language pack, authors and way to use literal strings
* Translations also for FreeBSD
* Minimal GTK3 WX build on FreeBSD requires wxGraphicsContext
* Get Preferences properly instead of workaround function
* Use WrapSizer instead of BoxSizer for author line
This forces long author lists to be put on a new line, reducing
the need to increase window width.
* Update Finnish translation
* Borrow translation from IDM_LANGUAGE where it makes sense
* Remove colon and thus unneeded function
* Simplify Language tab layout
* Reintroduce macOS specific fixes to Forms.cpp
* cleanup
|
|
|
|
* Update Language.zh-cn.xml
修改字体为简体中文系统的默认字体:微软雅黑(Microsoft YaHei)
* Update Language.zh-cn.xml
修改字体大小
|
|
|
|
|
|
|
|
1、翻译
2、统一加载按钮的翻译
|
|
|
|
signed driver files.
|
|
* Update Language.zh-cn.xml
* Update Language.zh-cn.xml
|
|
memory protection
Also a dedicated page in the documentation was added for it.
|
|
|
|
|
|
for commit f15052e68d43bdad8d8a125a3601ff8cedcf5a3d
|
|
documentation to mention risks of third-party file extensions.
This commit also adds red color to the warning text about keyfiles in keyfiles dialogs.
|
|
https://github.com/veracrypt/VeraCrypt/blob/d3ecffac3b46abb0d6a91a82838c05b11fd6fe0c/Translations/Language.zh-cn.xml#L1608C89-L1608C89
Missing character n after backslash
|
|
|
|
|
|
* Update Language.zh-cn.xml
* Update Language.zh-cn.xml
* Update Language.zh-cn.xml
* Update Language.zh-cn.xml
* Update Language.zh-cn.xml
unify the colon symbol ``:`` to Chinese style ``:``
* Update Language.zh-cn.xml
unify symbols ``.`` ``,`` ``;`` to Chinese style ``。`` ``,`` ``;``
* Update Language.zh-cn.xml
* Update Language.zh-cn.xml
fix `:` in the bug report template
|
|
conflict
This avoids using a merge strategy that would have polluted git history (no squash possible)
|
|
|
|
|
|
by code
|
|
Increment version to 1.26.4
|
|
format.com and specifying removal parameter in FormatEx
The usage of /Y parameter in format.com simplifies the logic and makes the code robust since we don't need to send \n to the format.com process.
Specifying RemovableMedia parameter to FormatEx fixes its failure in Windows 10 and later to perform quick format. This is also more adequate since we are mounting the volume as removable media for the formatting process.
We also add better error management in order to display adequate error message to the user in case of failure
|
|
|
|
|
|
QuickFormat/FastCreate/FullFormat
This required changes to internal logic and addition of new UI strings
|
|
|
|
More work is needed to localize remaining string resources
|
|
for commit bb55343f635cdda4f62c998b269c88cb9df384ec
|
|
|
|
This change also makes it possible to generate keyfiles larger than 1 MiB although only the first 1 MiB will be taken into account by VeraCrypt.
Update strings in XML files
|
|
for commit 5e4e2e0483436031edfd525215110f6229ac406d
|