Update Chocolatey Version

[KingJ]

Would it be possible to update the version on Chocolatey? It is currently 17.10.20.2236 but the latest Github release is 18.02.20.0506 which confused me a bit when I came to try and configure it via Powershell as that was only possible since 18.02.04.2335.

Many thanks!

[raspi]

18.02.04.2335 is in pre-release phase. I'm currently at more in-depth security research phase for the new release version. The pre-release version has the possibility for malicious execution. For example:

Some sysadmin gets fired and they manage to edit the powershell script and add some malicious script like:

Randomly-Delete-One-File
$config = New-Object WinLLDPService.Configuration
# ...
Return $config

I'm trying to mitigate this somehow. Currently i'm thinking that the script is loaded once when the service starts and the script's contents are logged to event log. This way it can be catched.

There's some other approaches too and I'm researching those.