| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| winboat-0.9.2-amd64.deb | 2026-08-25 | 127.3 MB | |
| winboat-0.9.2-x64.tar.gz | 2026-08-25 | 153.8 MB | |
| winboat-0.9.2-x86_64.AppImage | 2026-08-25 | 161.2 MB | |
| winboat-0.9.2-x86_64.rpm | 2026-08-25 | 113.8 MB | |
| winboat-linux-unpacked.zip | 2026-08-25 | 159.1 MB | |
| winboat_guest_server.zip | 2026-08-25 | 6.4 MB | |
| README.md | 2026-08-25 | 861 Bytes | |
| v0.9.2 source code.tar.gz | 2026-08-25 | 2.2 MB | |
| v0.9.2 source code.zip | 2026-08-25 | 2.3 MB | |
| Totals: 9 Items | 726.1 MB | 4 | |
🎉 Release v0.9.2
This is the final release of WinBoat 0.9, it only contains security patches and other minor fixes. Stay tuned for 1.0, we're excited to ship GPU acceleration and other cool things.
🛡️ Security:
- Fixed a flaw that allowed attackers to execute arbitrary PS1 commands inside the VM by calling get-icon with specific parameters
- Restricted icon lookup paths to prevent remote UNC access and reject control characters
- Prevent Slowloris-like attacks by restricting header read timeout
- Passwords are no longer logged in compose and FreeRDP logs (backported)
(Thank you to @AndreaBonn for reaching out about the vulnerability, fixed within 4 hours after initial contact)
🛠️ Minor Changes:
- Bumped Electron to 44
- Bumped dockur/windows to 6.05
- The profile picture is now a local file (backported)
