From 01e45ca8cc1f42b71aeaf983b2e393dd35055e72d67dccb76f525ca3da269538 Mon Sep 17 00:00:00 2001 From: Dominik Heidler Date: Tue, 18 Jul 2023 16:03:18 +0000 Subject: [PATCH] =?UTF-8?q?-=20Version=201.11.36=20##=20=F0=9F=94=92=20Sec?= =?UTF-8?q?urity=20=20*=20Fixes=20for=20[CVE-2023-37259](https://cve.mitre?= =?UTF-8?q?.org/cgi-bin/cvekey.cgi=3Fkeyword=3DCVE-2023-37259)=20/=20[GHSA?= =?UTF-8?q?-c9vx-2g7w-rp65](https://github.com/matrix-org/matrix-react-sdk?= =?UTF-8?q?/security/advisories/GHSA-c9vx-2g7w-rp65)=20##=20=F0=9F=A6=96?= =?UTF-8?q?=20Deprecations=20=20*=20Deprecate=20customisations=20in=20favo?= =?UTF-8?q?ur=20of=20Module=20API=20([\#25736](https://github.com/vector-i?= =?UTF-8?q?m/element-web/pull/25736)).=20Fixes=20vector-im/element-web#257?= =?UTF-8?q?33.=20##=20=E2=9C=A8=20Features=20=20*=20OIDC:=20store=20initia?= =?UTF-8?q?l=20screen=20in=20session=20storage=20=20([\#25688](https://git?= =?UTF-8?q?hub.com/vector-im/element-web/pull/25688)).=20Fixes=20vector-im?= =?UTF-8?q?/element-web#25656.=20Contributed=20by=20@kerryarchibald.=20=20?= =?UTF-8?q?*=20Allow=20default=5Fserver=5Fconfig=20as=20a=20fallback=20con?= =?UTF-8?q?fig=20([\#25682](https://github.com/vector-im/element-web/pull/?= =?UTF-8?q?25682)).=20Contributed=20by=20@ShadowRZ.=20=20*=20OIDC:=20remov?= =?UTF-8?q?e=20auth=20params=20from=20url=20after=20login=20attempt=20([\#?= =?UTF-8?q?25664](https://github.com/vector-im/element-web/pull/25664)).?= =?UTF-8?q?=20Contributed=20by=20@kerryarchibald.=20=20*=20feat(faq):=20re?= =?UTF-8?q?move=20keyboard=20shortcuts=20button=20([\#9342](https://github?= =?UTF-8?q?.com/matrix-org/matrix-react-sdk/pull/9342)).=20Fixes=20vector-?= =?UTF-8?q?im/element-web#22625.=20Contributed=20by=20@gefgu.=20=20*=20GYU?= =?UTF-8?q?:=20Update=20banner=20([\#11211](https://github.com/matrix-org/?= =?UTF-8?q?matrix-react-sdk/pull/11211)).=20Fixes=20vector-im/element-web#?= =?UTF-8?q?25530.=20Contributed=20by=20@justjanne.=20=20*=20Linkify=20mxc:?= =?UTF-8?q?//=20URLs=20as=20links=20to=20your=20media=20repo=20([\#11213](?= =?UTF-8?q?https://github.com/matrix-org/matrix-react-sdk/pull/11213)).=20?= =?UTF-8?q?Fixes=20vector-im/element-web#6942.=20=20*=20OIDC:=20Log=20in?= =?UTF-8?q?=20([\#11199](https://github.com/matrix-org/matrix-react-sdk/pu?= =?UTF-8?q?ll/11199)).=20Fixes=20vector-im/element-web#25657.=20Contribute?= =?UTF-8?q?d=20by=20@kerryarchibald.=20=20*=20Handle=20all=20permitted=20u?= =?UTF-8?q?rl=20schemes=20in=20linkify=20([\#11215](https://github.com/mat?= =?UTF-8?q?rix-org/matrix-react-sdk/pull/11215)).=20Fixes=20vector-im/elem?= =?UTF-8?q?ent-web#4457=20and=20vector-im/element-web#8720.=20=20*=20Autoa?= =?UTF-8?q?pprove=20Element=20Call=20oidc=20requests=20([\#11209](https://?= =?UTF-8?q?github.com/matrix-org/matrix-react-sdk/pull/11209)).=20Contribu?= =?UTF-8?q?ted=20by=20@toger5.=20=20*=20Allow=20creating=20knock=20rooms?= =?UTF-8?q?=20([\#11182](https://github.com/matrix-org/matrix-react-sdk/pu?= =?UTF-8?q?ll/11182)).=20Contributed=20by=20@charlynguyen.=20=20*=20Expose?= =?UTF-8?q?=20and=20pre-populate=20thread=20ID=20in=20devtools=20dialog=20?= =?UTF-8?q?([\#10953](https://github.com/matrix-org/matrix-react-sdk/pull/?= =?UTF-8?q?10953)).=20=20*=20Hide=20URL=20preview=20if=20it=20will=20be=20?= =?UTF-8?q?empty=20([\#9029](https://github.com/matrix-org/matrix-react-sd?= =?UTF-8?q?k/pull/9029)).=20=20*=20Change=20wording=20from=20avatar=20to?= =?UTF-8?q?=20profile=20picture=20([\#7015](https://github.com/matrix-org/?= =?UTF-8?q?matrix-react-sdk/pull/7015)).=20Fixes=20vector-im/element-meta#?= =?UTF-8?q?1331.=20Contributed=20by=20@aaronraimist.=20=20*=20Quick=20and?= =?UTF-8?q?=20dirty=20devtool=20to=20explore=20state=20history=20([\#11197?= =?UTF-8?q?](https://github.com/matrix-org/matrix-react-sdk/pull/11197)).?= =?UTF-8?q?=20=20*=20Consider=20more=20user=20inputs=20when=20calculating?= =?UTF-8?q?=20zxcvbn=20score=20([\#11180](https://github.com/matrix-org/ma?= =?UTF-8?q?trix-react-sdk/pull/11180)).=20=20*=20GYU:=20Account=20Notifica?= =?UTF-8?q?tion=20Settings=20([\#11008](https://github.com/matrix-org/matr?= =?UTF-8?q?ix-react-sdk/pull/11008)).=20Fixes=20vector-im/element-web#2456?= =?UTF-8?q?7.=20Contributed=20by=20@justjanne.=20=20*=20Compound=20Typogra?= =?UTF-8?q?phy=20pass=20([\#11103](https://github.com/matrix-org/matrix-re?= =?UTF-8?q?act-sdk/pull/11103)).=20Fixes=20vector-im/element-web#25548.=20?= =?UTF-8?q?=20*=20OIDC:=20navigate=20to=20authorization=20endpoint=20([\#1?= =?UTF-8?q?1096](https://github.com/matrix-org/matrix-react-sdk/pull/11096?= =?UTF-8?q?)).=20Fixes=20vector-im/element-web#25574.=20Contributed=20by?= =?UTF-8?q?=20@kerryarchibald.=20##=20=F0=9F=90=9B=20Bug=20Fixes=20=20*=20?= =?UTF-8?q?Fix=20read=20receipt=20sending=20behaviour=20around=20thread=20?= =?UTF-8?q?roots=20([\#3600](https://github.com/matrix-org/matrix-js-sdk/p?= =?UTF-8?q?ull/3600)).=20=20*=20Fix=20missing=20metaspace=20notification?= =?UTF-8?q?=20badges=20([\#11269](https://github.com/matrix-org/matrix-rea?= =?UTF-8?q?ct-sdk/pull/11269)).=20Fixes=20vector-im/element-web#25679.=20?= =?UTF-8?q?=20*=20Make=20checkboxes=20less=20rounded=20([\#11224](https://?= =?UTF-8?q?github.com/matrix-org/matrix-react-sdk/pull/11224)).=20Contribu?= =?UTF-8?q?ted=20by=20@andybalaam.=20=20*=20GYU:=20Fix=20issues=20with=20a?= =?UTF-8?q?udible=20keywords=20without=20activated=20mentions=20([\#11218]?= =?UTF-8?q?(https://github.com/matrix-org/matrix-react-sdk/pull/11218)).?= =?UTF-8?q?=20Contributed=20by=20@justjanne.=20=20*=20PosthogAnalytics=20u?= =?UTF-8?q?nwatch=20settings=20on=20logout=20([\#11207](https://github.com?= =?UTF-8?q?/matrix-org/matrix-react-sdk/pull/11207)).=20Fixes=20vector-im/?= =?UTF-8?q?element-web#25703.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/element-desktop?expand=0&rev=40 --- element-desktop-1.11.34.tar.gz | 3 -- element-desktop-1.11.36.tar.gz | 3 ++ element-desktop.changes | 55 +++++++++++++++++++++++++++++++ element-desktop.spec | 2 +- element-web-1.11.34.tar.gz | 3 -- element-web-1.11.36.tar.gz | 3 ++ hak.tar.gz | 4 +-- npm-packages-offline-cache.tar.gz | 4 +-- 8 files changed, 66 insertions(+), 11 deletions(-) delete mode 100644 element-desktop-1.11.34.tar.gz create mode 100644 element-desktop-1.11.36.tar.gz delete mode 100644 element-web-1.11.34.tar.gz create mode 100644 element-web-1.11.36.tar.gz diff --git a/element-desktop-1.11.34.tar.gz b/element-desktop-1.11.34.tar.gz deleted file mode 100644 index fffa8e0..0000000 --- a/element-desktop-1.11.34.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5163d11740bb9f9660c919a28c5a6fe2828660849088ce1e6b40b558736afd18 -size 1984362 diff --git a/element-desktop-1.11.36.tar.gz b/element-desktop-1.11.36.tar.gz new file mode 100644 index 0000000..c9a0e2f --- /dev/null +++ b/element-desktop-1.11.36.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ced324570c66e23de0aeede1dd2fabbcbb967ebc12e4236787c15787043d9d02 +size 1989418 diff --git a/element-desktop.changes b/element-desktop.changes index f9d0f2e..9e1915b 100644 --- a/element-desktop.changes +++ b/element-desktop.changes @@ -1,3 +1,58 @@ +------------------------------------------------------------------- +Tue Jul 18 16:00:46 UTC 2023 - Dominik Heidler + +- Version 1.11.36 +## 🔒 Security + * Fixes for [CVE-2023-37259](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE-2023-37259) / [GHSA-c9vx-2g7w-rp65](https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-c9vx-2g7w-rp65) + +## 🦖 Deprecations + * Deprecate customisations in favour of Module API ([\#25736](https://github.com/vector-im/element-web/pull/25736)). Fixes vector-im/element-web#25733. + +## ✨ Features + * OIDC: store initial screen in session storage ([\#25688](https://github.com/vector-im/element-web/pull/25688)). Fixes vector-im/element-web#25656. Contributed by @kerryarchibald. + * Allow default_server_config as a fallback config ([\#25682](https://github.com/vector-im/element-web/pull/25682)). Contributed by @ShadowRZ. + * OIDC: remove auth params from url after login attempt ([\#25664](https://github.com/vector-im/element-web/pull/25664)). Contributed by @kerryarchibald. + * feat(faq): remove keyboard shortcuts button ([\#9342](https://github.com/matrix-org/matrix-react-sdk/pull/9342)). Fixes vector-im/element-web#22625. Contributed by @gefgu. + * GYU: Update banner ([\#11211](https://github.com/matrix-org/matrix-react-sdk/pull/11211)). Fixes vector-im/element-web#25530. Contributed by @justjanne. + * Linkify mxc:// URLs as links to your media repo ([\#11213](https://github.com/matrix-org/matrix-react-sdk/pull/11213)). Fixes vector-im/element-web#6942. + * OIDC: Log in ([\#11199](https://github.com/matrix-org/matrix-react-sdk/pull/11199)). Fixes vector-im/element-web#25657. Contributed by @kerryarchibald. + * Handle all permitted url schemes in linkify ([\#11215](https://github.com/matrix-org/matrix-react-sdk/pull/11215)). Fixes vector-im/element-web#4457 and vector-im/element-web#8720. + * Autoapprove Element Call oidc requests ([\#11209](https://github.com/matrix-org/matrix-react-sdk/pull/11209)). Contributed by @toger5. + * Allow creating knock rooms ([\#11182](https://github.com/matrix-org/matrix-react-sdk/pull/11182)). Contributed by @charlynguyen. + * Expose and pre-populate thread ID in devtools dialog ([\#10953](https://github.com/matrix-org/matrix-react-sdk/pull/10953)). + * Hide URL preview if it will be empty ([\#9029](https://github.com/matrix-org/matrix-react-sdk/pull/9029)). + * Change wording from avatar to profile picture ([\#7015](https://github.com/matrix-org/matrix-react-sdk/pull/7015)). Fixes vector-im/element-meta#1331. Contributed by @aaronraimist. + * Quick and dirty devtool to explore state history ([\#11197](https://github.com/matrix-org/matrix-react-sdk/pull/11197)). + * Consider more user inputs when calculating zxcvbn score ([\#11180](https://github.com/matrix-org/matrix-react-sdk/pull/11180)). + * GYU: Account Notification Settings ([\#11008](https://github.com/matrix-org/matrix-react-sdk/pull/11008)). Fixes vector-im/element-web#24567. Contributed by @justjanne. + * Compound Typography pass ([\#11103](https://github.com/matrix-org/matrix-react-sdk/pull/11103)). Fixes vector-im/element-web#25548. + * OIDC: navigate to authorization endpoint ([\#11096](https://github.com/matrix-org/matrix-react-sdk/pull/11096)). Fixes vector-im/element-web#25574. Contributed by @kerryarchibald. + +## 🐛 Bug Fixes + * Fix read receipt sending behaviour around thread roots ([\#3600](https://github.com/matrix-org/matrix-js-sdk/pull/3600)). + * Fix missing metaspace notification badges ([\#11269](https://github.com/matrix-org/matrix-react-sdk/pull/11269)). Fixes vector-im/element-web#25679. + * Make checkboxes less rounded ([\#11224](https://github.com/matrix-org/matrix-react-sdk/pull/11224)). Contributed by @andybalaam. + * GYU: Fix issues with audible keywords without activated mentions ([\#11218](https://github.com/matrix-org/matrix-react-sdk/pull/11218)). Contributed by @justjanne. + * PosthogAnalytics unwatch settings on logout ([\#11207](https://github.com/matrix-org/matrix-react-sdk/pull/11207)). Fixes vector-im/element-web#25703. + * Avoid trying to set room account data for pinned events as guest ([\#11216](https://github.com/matrix-org/matrix-react-sdk/pull/11216)). Fixes vector-im/element-web#6300. + * GYU: Disable sound for DMs checkbox when DM notifications are disabled ([\#11210](https://github.com/matrix-org/matrix-react-sdk/pull/11210)). Contributed by @justjanne. + * force to allow calls without video and audio in embedded mode ([\#11131](https://github.com/matrix-org/matrix-react-sdk/pull/11131)). Contributed by @EnricoSchw. + * Fix room tile text clipping ([\#11196](https://github.com/matrix-org/matrix-react-sdk/pull/11196)). Fixes vector-im/element-web#25718. + * Handle newlines in user pills ([\#11166](https://github.com/matrix-org/matrix-react-sdk/pull/11166)). Fixes vector-im/element-web#10994. + * Limit width of user menu in space panel ([\#11192](https://github.com/matrix-org/matrix-react-sdk/pull/11192)). Fixes vector-im/element-web#22627. + * Add isLocation to ComposerEvent analytics events ([\#11187](https://github.com/matrix-org/matrix-react-sdk/pull/11187)). Contributed by @andybalaam. + * Fix: hide unsupported login elements ([\#11185](https://github.com/matrix-org/matrix-react-sdk/pull/11185)). Fixes vector-im/element-web#25711. Contributed by @kerryarchibald. + * Scope smaller font size to user info panel ([\#11178](https://github.com/matrix-org/matrix-react-sdk/pull/11178)). Fixes vector-im/element-web#25683. + * Apply i18n to strings in the html export ([\#11176](https://github.com/matrix-org/matrix-react-sdk/pull/11176)). + * Inhibit url previews on MXIDs containing slashes same as those without ([\#11160](https://github.com/matrix-org/matrix-react-sdk/pull/11160)). + * Make event info size consistent with state events ([\#11181](https://github.com/matrix-org/matrix-react-sdk/pull/11181)). + * Fix markdown content spacing ([\#11177](https://github.com/matrix-org/matrix-react-sdk/pull/11177)). Fixes vector-im/element-web#25685. + * Fix font-family definition for emojis ([\#11170](https://github.com/matrix-org/matrix-react-sdk/pull/11170)). Fixes vector-im/element-web#25686. + * Fix spurious error sending receipt in thread errors ([\#11157](https://github.com/matrix-org/matrix-react-sdk/pull/11157)). + * Consider the empty push rule actions array equiv to deprecated dont_notify ([\#11155](https://github.com/matrix-org/matrix-react-sdk/pull/11155)). Fixes vector-im/element-web#25674. + * Only trap escape key for cancel reply if there is a reply ([\#11140](https://github.com/matrix-org/matrix-react-sdk/pull/11140)). Fixes vector-im/element-web#25640. + * Update linkify to 4.1.1 ([\#11132](https://github.com/matrix-org/matrix-react-sdk/pull/11132)). Fixes vector-im/element-web#23806. + ------------------------------------------------------------------- Fri Jun 23 14:27:36 UTC 2023 - Dominik Heidler diff --git a/element-desktop.spec b/element-desktop.spec index 578620d..34915e6 100644 --- a/element-desktop.spec +++ b/element-desktop.spec @@ -17,7 +17,7 @@ Name: element-desktop -Version: 1.11.34 +Version: 1.11.36 Release: 0 Summary: A glossy Matrix collaboration client - desktop License: Apache-2.0 diff --git a/element-web-1.11.34.tar.gz b/element-web-1.11.34.tar.gz deleted file mode 100644 index 872d375..0000000 --- a/element-web-1.11.34.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:54bfef3484f18135408b427ff253496e36a6ad3788b1df3c6c7ba0655e23e21b -size 1499270 diff --git a/element-web-1.11.36.tar.gz b/element-web-1.11.36.tar.gz new file mode 100644 index 0000000..109f5e9 --- /dev/null +++ b/element-web-1.11.36.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:bc87ffcfac3cba117bc2d2d278db2315958457591c2d21ec325878471f801a8c +size 1503594 diff --git a/hak.tar.gz b/hak.tar.gz index c3188d0..a90611a 100644 --- a/hak.tar.gz +++ b/hak.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:59caecba317bf004a15364d9a25a4617d868dcce0f200e0c7ebdce8847fea280 -size 131180220 +oid sha256:a40593e51570374645d5cac67eaec54f75640f034b02b913783979353bf15abd +size 131191297 diff --git a/npm-packages-offline-cache.tar.gz b/npm-packages-offline-cache.tar.gz index 19d01e3..bd37a5c 100644 --- a/npm-packages-offline-cache.tar.gz +++ b/npm-packages-offline-cache.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:4cd638a6700dd29b47e077d4cb59c38b992c9bbae1fee9775417b57db215c535 -size 154083980 +oid sha256:29344a01d49223384c531dc151b56958ca5c00a1d5a386fd7a135f2b41a9d718 +size 156737251