Rufus 4.11 (Build 2285)

* Alter the WUE CA 2023 option text and remove duplicate translation for "ISO Image".
* Force cache-only when invoking CertGetCertificateChain (This should address #2781).

Author: pbatard

ChangeLog.txt

@@ -1,3 +1,11 @@
+o Version 4.11 (2025.10.02)
+    Add a cheat mode to toggle between Light and Dark mode
+    Improve WUE option text relating to the CA 2023 option
+    Update Linux SBAT / Microsoft SVN Secure Boot revocation values to latest
+    Fix some GRUB/Syslinux download dialogs showing only the 'Close' button
+    Fix an assert being triggered when using the WUE CA 2023 option on its own
+    Fix an application crash on systems that have a failed dynamic disk
+
 o Version 4.10 (2025.09.24)
     Add Dark Mode support (courtesy of @ozone10)
     Add support for creating Windows CA 2023 compatible media (requires a Windows 11 25H2 ISO)

res/appstore/listing/listing.csv

@@ -114,14 +114,12 @@
 • Trang web chính thức: https://rufus.ie
 • Mã nguồn: https://github.com/pbatard/rufus
 • Nhật ký thay đổi: https://github.com/pbatard/rufus/blob/master/ChangeLog.txt"
-"ReleaseNotes","3","Text","• Add Dark Mode support (courtesy of @ozone10)
-• Add support for creating Windows CA 2023 compatible media (requires a Windows 11 25H2 ISO)
-• Add support for saving an existing drive to ISO (UDF only)
-• Improve error reporting when saving to VHD/VHDX (with thanks to @Kazkans)
-• Improve persistence support for Linux Mint
-• Fix UEFI DBX updates being reported in some timezones, even when there are none
-• Fix a situation where no file system can be selected in ISO mode
-• Fix a crash when trying to process Windows ISOs with very long paths",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
+"ReleaseNotes","3","Text","• Add a cheat mode to toggle between Light and Dark mode
+• Improve WUE option text relating to the CA 2023 option
+• Update Linux SBAT / Microsoft SVN Secure Boot revocation values to latest
+• Fix some GRUB/Syslinux download dialogs showing only the 'Close' button
+• Fix an assert being triggered when using the WUE CA 2023 option on its own
+• Fix an application crash on systems that have a failed dynamic disk",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 "Title","4","Text","Rufus",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 "ShortTitle","5","Text","",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
 "SortTitle","6","Text","",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

res/loc/po/fr-FR.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: 4.5\n"
 "Report-Msgid-Bugs-To: pete@akeo.ie\n"
-"POT-Creation-Date: 2025-04-02 11:34+0100\n"
-"PO-Revision-Date: 2025-04-02 11:51+0100\n"
+"POT-Creation-Date: 2025-10-01 18:52+0100\n"
+"PO-Revision-Date: 2025-10-01 18:53+0100\n"
 "Last-Translator: \n"
 "Language-Team: \n"
 "Language: fr_FR\n"
@@ -13,7 +13,7 @@ msgstr ""
 "X-Poedit-SourceCharset: UTF-8\n"
 "X-Rufus-LanguageName: French (Français)\n"
 "X-Rufus-LCID: 0x040c, 0x080c, 0x0c0c, 0x100c, 0x140c, 0x180c, 0x1c0c, 0x200c, 0x240c, 0x280c, 0x2c0c, 0x300c, 0x340c, 0x380c, 0xe40c\n"
-"X-Generator: Poedit 3.6\n"
+"X-Generator: Poedit 3.7\n"
 
 #. • IDD_DIALOG → IDS_DRIVE_PROPERTIES_TXT
 msgid "Drive Properties"
@@ -1840,13 +1840,13 @@ msgstr "Log persistent"
 
 #. • MSG_337
 msgid ""
-"An additional file ('diskcopy.dll') must be downloaded from Microsoft to install MS-DOS:\n"
+"An additional file ('%s') must be downloaded from Microsoft to use this feature:\n"
 "- Select 'Yes' to connect to the Internet and download it\n"
 "- Select 'No' to cancel the operation\n"
 "\n"
 "Note: The file will be downloaded in the application's directory and will be reused automatically if present."
 msgstr ""
-"Un fichier supplémentaire ('diskcopy.dll') doit être téléchargé depuis Microsoft pour installer MS-DOS :\n"
+"Un fichier supplémentaire ('%s') doit être téléchargé depuis Microsoft pour utiliser cette fonctionalité :\n"
 "- Sélectionnez 'Oui' pour vous connecter à Internet et le télécharger\n"
 "- Sélectionnez 'Non' pour annuler l’opération\n"
 "\n"
@@ -1915,8 +1915,8 @@ msgid "Use Rufus MBR"
 msgstr "Utilisation du MBR Rufus"
 
 #. • MSG_350
-msgid "Use 'Windows UEFI CA 2023' signed bootloaders [EXPERIMENTAL]"
-msgstr "Utiliser les bootloaders signés par 'Windows UEFI CA 2023' [EXPÉRIMENTAL]"
+msgid "Use 'Windows CA 2023' signed bootloaders (requires a compatible target PC)"
+msgstr "Utiliser les bootloaders signés par 'Windows CA 2023' (nécessite un PC cible compatible)"
 
 #. • MSG_351
 msgid "Checking for UEFI bootloader revocation..."

res/loc/rufus.loc

@@ -609,7 +609,7 @@ t MSG_346 "Restrict Windows to S-Mode (INCOMPATIBLE with online account bypass)"
 t MSG_347 "Expert Mode"
 t MSG_348 "Extracting archive files: %s"
 t MSG_349 "Use Rufus MBR"
-t MSG_350 "Use 'Windows CA 2023' signed bootloaders [requires KB5025885 or Mosby]"
+t MSG_350 "Use 'Windows CA 2023' signed bootloaders (requires a compatible target PC)"
 t MSG_351 "Checking for UEFI bootloader revocation..."
 t MSG_352 "Checking for UEFI DBX updates..."
 t MSG_353 "DBX update available"
@@ -4816,12 +4816,11 @@ t MSG_346 "Restreint Windows au mode \"S\" (INCOMPATIBLE avec l'option de désac
 t MSG_347 "Mode expert"
 t MSG_348 "Extraction d'archive : %s"
 t MSG_349 "Utilisation du MBR Rufus"
-t MSG_350 "Utiliser les bootloaders signés par 'Windows UEFI CA 2023' [EXPÉRIMENTAL]"
+t MSG_350 "Utiliser les bootloaders signés par 'Windows CA 2023' (nécessite un PC cible compatible)"
 t MSG_351 "Vérification de la revocation des bootloaders UEFI..."
 t MSG_352 "Vérification des mises à jour de DBX UEFI..."
 t MSG_353 "Mise à jour DBX disponible"
 t MSG_354 "Rufus a trouvé une mise à jour des fichiers DBX utilisés pour effectuer la validation des revocations Secure Boot sous UEFI. Voulez-vous télécharger cette mise à jour ?\n- Sélectionnez 'Oui' pour vous connecter à Internet et le télécharger ce contenu\n- Sélectionnez 'Non' pour annuler l’opération\n\nNote : Ces fichiers seront téléchargés dans le répertoire de l'application et réutilisés automatiquement si ils sont présent."
-t MSG_355 "Image ISO"
 t MSG_900 "Rufus est un utilitaire permettant de formater et de créer des média USB amorçables, tels que clés USB, mémoire flash, etc."
 t MSG_901 "Site officiel : %s"
 t MSG_902 "Code source: %s"

src/parser.c

@@ -1646,7 +1646,6 @@ sbat_entry_t* GetSbatEntries(char* sbatlevel)
  * Parse a list of SHA-1 certificate hexascii thumbprints.
  * List must be freed by the caller.
  */
-
 thumbprint_list_t* GetThumbprintEntries(char* thumbprints_txt)
 {
 	uint32_t i, j, num_entries;

src/pki.c

@@ -455,7 +455,8 @@ int GetIssuerCertificateInfo(uint8_t* cert, cert_info_t* info)
 	// Build a certificate chain to get the issuer (CA) certificate.
 	memset(&chainPara, 0, sizeof(chainPara));
 	chainPara.cbSize = sizeof(CERT_CHAIN_PARA);
-	if (!CertGetCertificateChain(NULL, pCertContext[0], NULL, hStore, &chainPara, 0, NULL, &pChainContext)) {
+	if (!CertGetCertificateChain(NULL, pCertContext[0], NULL, hStore, &chainPara,
+		CERT_CHAIN_CACHE_ONLY_URL_RETRIEVAL | CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY, NULL, &pChainContext)) {
 		uprintf("PKI: Failed to build certificate chain. Error code: %s", WinPKIErrorString());
 		goto out;
 	}

src/rufus.rc

@@ -33,7 +33,7 @@ LANGUAGE LANG_NEUTRAL, SUBLANG_NEUTRAL
 IDD_DIALOG DIALOGEX 12, 12, 232, 326
 STYLE DS_SETFONT | DS_MODALFRAME | DS_CENTER | WS_MINIMIZEBOX | WS_POPUP | WS_CAPTION | WS_SYSMENU
 EXSTYLE WS_EX_ACCEPTFILES
-CAPTION "Rufus 4.11.2284"
+CAPTION "Rufus 4.11.2285"
 FONT 9, "Segoe UI Symbol", 400, 0, 0x0
 BEGIN
     LTEXT           "Drive Properties",IDS_DRIVE_PROPERTIES_TXT,8,6,53,12,NOT WS_GROUP
@@ -408,8 +408,8 @@ END
 //
 
 VS_VERSION_INFO VERSIONINFO
- FILEVERSION 4,11,2284,0
- PRODUCTVERSION 4,11,2284,0
+ FILEVERSION 4,11,2285,0
+ PRODUCTVERSION 4,11,2285,0
  FILEFLAGSMASK 0x3fL
 #ifdef _DEBUG
  FILEFLAGS 0x1L
@@ -427,13 +427,13 @@ BEGIN
             VALUE "Comments", "https://rufus.ie"
             VALUE "CompanyName", "Akeo Consulting"
             VALUE "FileDescription", "Rufus"
-            VALUE "FileVersion", "4.11.2284"
+            VALUE "FileVersion", "4.11.2285"
             VALUE "InternalName", "Rufus"
             VALUE "LegalCopyright", "� 2011-2025 Pete Batard (GPL v3)"
             VALUE "LegalTrademarks", "https://www.gnu.org/licenses/gpl-3.0.html"
             VALUE "OriginalFilename", "rufus-4.11.exe"
             VALUE "ProductName", "Rufus"
-            VALUE "ProductVersion", "4.11.2284"
+            VALUE "ProductVersion", "4.11.2285"
         END
     END
     BLOCK "VarFileInfo"

src/vhd.c

@@ -594,9 +594,8 @@ BOOL SaveImage(void)
 	char filename[128], letters[27], path[MAX_PATH];
 	int DriveIndex = ComboBox_GetCurSel(hDeviceList);
 	enum { image_type_vhd = 1, image_type_vhdx = 2, image_type_ffu = 3, image_type_iso = 4 };
-	// Add a non-printable zero-width space to UDF *.iso extension to differentiate it from ISO-9660
 	static EXT_DECL(img_ext, filename, __VA_GROUP__("*.vhd", "*.vhdx", "*.ffu", "*.iso"),
-		__VA_GROUP__(lmprintf(MSG_343), lmprintf(MSG_342), lmprintf(MSG_344), lmprintf(MSG_355)));
+		__VA_GROUP__(lmprintf(MSG_343), lmprintf(MSG_342), lmprintf(MSG_344), lmprintf(MSG_036)));
 	ULARGE_INTEGER free_space;
 
 	memset(&img_save, 0, sizeof(IMG_SAVE));