Release Notes

• Added authenticode signature verification for PingCastleAutoUpdater to block updates from non-signed or tampered ZIP files. Files are extracted and examined into a temporary directory and are only installed if signatures are verified.
• Added path traversal checks when processing ZIP files in PingCastleAutoUpdater to restrict update contents to the target directory only.