CodeMeter Runtime 8.40 released

[Rinix]

CodeMeter 8.40
Release Date: 2025-Aug-07
Operating Systems Windows, Linux, Mac OS X
Download Windows (126.53MB): Click Here

Info
Note on security vulnerabilities
Under certain conditions, installing CodeMeter on Windows could result in an unintended privilege escalation. In such cases, CodeMeter Control Center could be launched with System privileges instead of the permissions of the user account (CVE-2025-47809). This vulnerability has been fixed in version 8.30a. As of this version, CodeMeter Control Center is only launched at the end of the installation if it is clearly determined that only user-level privileges are present. A detailed classification is published in Security Advisory WIBU-100120 at https://www.wibu.com/en/support/security-advisories.html

CodeMeter Control Center
The notification message before updating the CodeMeter firmware has been extended to explicitly state that the licenses are not available during the update (CmRt-79992).

New
CodeMeter WebAdmin License Monitoring for CmCloudContainer licenses
On the page License Monitoring Details in CodeMeter WebAdmin accesses to CmCloudContainer licenses from other systems are also displayed. These license allocations can be removed by clicking the respective symbol. A prerequisite for the removal operation is license access on the other system via CodeMeter Runtime version 8.40 or higher. The functionality for displaying and removing a CmCloudContainer license allocation is only available if it has been explicitly enabled by the software vendor for this CmCloudContainer.
Accesses to CmCloudContainer licenses from other systems are also listed via the CodeMeter API function 'CmGetInfo(CM_GEI_NETINFOCLUSTER)' and the command line tool 'cmu -n' (CmRt-73897).

Features
CmRt-100987: CodeMeter License Server: Due to the switch of integrity protection in CodeMeter to the mechanisms of AxProtector CTP, the previous option of checking integrity via 'cmu --check-cm-integrity' is no longer possible and no longer necessary. This command is therefore no longer available as of this version.

CmRt-101416: CodeMeter License Server: In the Core API the operating systems output was extended by the Windows Server 2025 operating system.

CmRt-101292: CodeMeter License Server: As with a CmCloudContainer, the serial number of a CmActLicense for Universal Firm Code consists of a MaskByte (130), a SerialNumber (4536271) and an ExtendedSerialNumber (91827364). So far, only the first two are visible in most cases, which is also sufficient for clear identification on a system. However, the extended part may be necessary for differentiation on the manufacturer side. Therefore, for example, this extended part can now be queried via API and also used for a CmAccess2. The extended part is now also displayed in some places in various programs (CodeMeter Control Center, cmu, CmDust).

CmRt-100983: CodeMeter License Server: The new command line option -v for CodeMeter License Server can be used to provide additional detailed information and details on the console.

CmRt-101510: CodeMeter License Server: The new command line option '-f:\<CmCloudCredentials.wbc\>? allows CodeMeter to import CmCloud credentials directly at startup. This parameter can be set multiple times and is used in particular for containers such as Docker and Kubernetes.

CmRt-100813: CodeMeter WebAdmin: It is now possible to display only license-relevant accesses when displaying the allocated licenses. Handles that were opened with NoUserLimit are then not listed. This allows you to quickly filter the relevant accesses in CodeMeter WebAdmin.

CmRt-101274: cmu: If CodeMeter License Server uses profiling from an *.ini file, the *.ini file actually used is now issued in CmDust, regardless of the storage location. If CodeMeter License Server is not running, the *.ini file is issued in the default location.

CmRt-101145: cmu: The command ?cmu --set-diagnose-level? can now be used to adjust the scope of logging during operation. The change takes effect immediately and enables targeted diagnostics without having to perform a restart.

CmRt-100866: WibuCmNET.dll: In the .NET API, all enums are now provided with the flag attribute to avoid warnings.

Bugfixes:
CmSetup-100147: Windows Installer: The reduced 64-bit installation program wrongly contained CodeMeter License Server as a 32-bit application and thus unnecessarily increased the size of the installation program.

CmSetup-100087: Windows Installer: The installation of CodeMeter must be performed with administrative rights so that CodeMeter can be installed as a service. Therefore, the dialog for selecting the user account is no longer displayed during installation.

CmRt-100964: CodeMeter License Server: With 'CmReadUvd()', a permanent failure of the readout for the handle used could occur after changing the encrypted communication. Now reading also works in such cases.

CmRt-101411: CodeMeter License Server: In rare cases, CodeMeter License Server could terminate unexpectedly. The causal error is now intercepted and displayed in the event log.

CmRt-101328: CodeMeter License Server: The improved integrity check of CodeMeter License Server built into 8.30 regularly led to a greatly increased processor load on weaker systems, which could have a negative impact on the operation of other applications. The integrity check now recognizes long check times and splits the checks into smaller partial checks if necessary to avoid a high processor load.

CmRt-100977: CodeMeter License Server: When calling 'CmGetBoxContents2()', the flag for country-specific licenses was not set, even though the option was available. This behavior has been corrected.

CmRt-101413: CodeMeter License Server: Since version 8.30, ?CmCheckEvents()? also reported the termination of the CodeMeter service by external influences (e.g., Task Manager). This functionality had to be removed again for technical reasons. Monitoring for external termination is no longer possible. To check service availability, it is recommended to perform regular license queries or other API calls at short intervals.

CmRt-101337: CodeMeter License Server: Windows: The loading process for native write filters has been secured to prevent the insertion of manipulated or incorrect libraries.

CmRt-101163: CodeMeter License Server: CmActLicense: CmActLicenses that were not activated displayed an error in the CodeMeter event log. The triggering functionality is not available if a CmActLicense is not activated. The function is no longer called and therefore unnecessary errors do not display.

CmRt-101038: CodeMeter License Server: CmReady: Linux: If a storage medium with a CmReady license was removed without unmounting, the CmContainer was still displayed as existing. Now an explicit check after an unplug event ensures that the status is also correct in this case.

CmRt-101117: CodeMeter License Server: The API function CmConvertString returned a string that was one byte too long in certain constellations. This has now been corrected.

CmRt-101256: CodeMeter License Server: If existing license accesses had to be rebooked to another license entry during the import of a license update, this led to inconsistent entries in the license tracking log.

CmRt-101396: CodeMeter WebAdmin: The status of a CmDongle (activated, activated while connected or deactivated) was not displayed correctly in CodeMeter WebAdmin in all cases. However, the control center display was correct. Now the correct status is displayed everywhere again.

CmRt-101583: CodeMeter WebAdmin: When switching to access via HTTPS for secure access, the created directory was not assigned the necessary rights under macOS and Linux. The directory now has the appropriate rights.

CmRt-100981: cmu: When using cmu and CmDust, unreadable output could be produced if, for example, directory names contained special characters. By correcting the output to the code page of the system, everything is now issued correctly.

CmRt-101361: cmu: On old Windows 10 instances and Windows Server 2016, a system function was used in CmDust respectively cmu for a check that was not yet available on these systems. The query has been changed so that it can also be performed for older systems.

CmRt-101153: cmu: If the extended access control is initially configured by an import via cmu, the configuration was not considered until either a rule was changed or CodeMeter was restarted. Now the extended access control takes effect directly after the import via cmu.

CmRt-101071: cmu: The command for creating codemtr.io via 'cmu --create-io' has been extended so that the access address stored in the CodeMeter chip is now also updated.

CmRt-101549: cmu: Since version 8.30, the command ?cmu --list-network? returned an empty list in certain constellations, even though licenses were available. This behavior has been fixed.