Security update
- Built with Go 1.27.2 and golang.org/x/net 0.60.0: fixes 12 known vulnerabilities in the HTTP/1 and HTTP/2 server and client, HTML templates, TLS and MIME parsing (among them denial of service through HTTP/2 and Range headers). The Windows 7 / Server 2012 agent is built with the matching legacy toolchain 1.27.2.
- The language switch no longer follows return addresses with control characters, which browsers could turn into a link to another site.
Licenses
- Appliance images (ISO, OVA, qcow2, VHDX) and the Linux recovery ISO now contain
SOURCE-CODE.txt: where to get the source code of BackupZit and of the Debian GPL software in them, with a written offer, plus the list of their Debian packages (/usr/share/doc/backupzit/). The file is also attached to every release.
Update the console and then the agents (Agents → Update all).
Releases are signed with the BackupZit release key; consoles verify them before installing.