| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| appcast.xml | 2026-11-01 | 5.8 kB | |
| appcast-2.0.3.xml | 2026-11-01 | 5.8 kB | |
| Monolingual-2.0.3.dmg | 2026-11-01 | 6.6 MB | |
| Monolingual-2.0.3.zip | 2026-11-01 | 5.9 MB | |
| Monolingual.app.dSYM.zip | 2026-11-01 | 1.2 MB | |
| Monolingual 2.0.3 source code.tar.gz | 2026-11-01 | 65.4 MB | |
| Monolingual 2.0.3 source code.zip | 2026-11-01 | 65.4 MB | |
| README.md | 2026-11-01 | 818 Bytes | |
| Totals: 8 Items | 144.6 MB | 0 | |
A security release.
- Moving language files to Trash no longer follows a symbolic link. Before a localization directory was moved, the helper handed it and everything below it to the user the app runs as, so that the user could empty the trash afterwards. It did that by path, and looking a path up follows a link at the end of it: a link placed inside the directory changed the ownership of its target, and since the helper runs as root, that target could be a file only root may write. The ownership is now changed through descriptors opened without following, and a link is skipped rather than resolved.
Reported by @h1ghl1kh7 — see the security advisory, GHSA-9gmw-jhrw-g8wf.
