WinBoat has been released in version v0.9.1.

WinBoat is a tool that lets you run Windows apps on Linux with seamless integration: Windows runs virtualized inside a Docker or Podman container in the background, and FreeRDP together with the RemoteApp protocol displays individual applications as native windows on the Linux desktop.

This final release of the 0.9 series focuses on security improvements: a vulnerability that allowed arbitrary PowerShell command execution via get-icon with specific parameters has been patched. Icon lookup paths are now restricted to block remote UNC access and reject control characters, and a protection against Slowloris-style attacks was added by restricting the header read timeout. Password logging has also been removed from compose and FreeRDP logs.

Security Fixes:

• Patched vulnerability allowing arbitrary PowerShell command execution via get-icon with specific parameters
• Restricted icon lookup paths to block remote UNC access and reject control characters
• Added protections against Slowloris-style attacks by restricting header read timeout
• Removed password logging from compose and FreeRDP logs

Minor Changes:

• Updated Electron to version 44
• Changed profile picture storage to local files

Source: GitHub