rpm/element-web
SHA256
1
0
Fork 0
forked from pool/element-web
Code Pull Requests Activity

- Version 1.11.26

Browse Source 
## 🐛 Bug Fixes
 * Changes for matrix-js-sdk v24.0.0
 * Changes for matrix-react-sdk v3.69.0

- Fix for CVE-2023-28427 and CVE-2023-28103

OBS-URL: https://build.opensuse.org/package/show/devel:languages:nodejs/element-web?expand=0&rev=37
This commit is contained in:
Dominik Heidler 2023-03-28 15:08:07 +00:00 committed by Git OBS Bridge
parent 4b074dd94c
commit c74a20ad78
6 changed files with 20 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
element-web-1.11.25.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7c9773de0d9762750b3bcf8d7ba97f7fb9faca74bc1a77a3121f520322f2494b
size 1479934

3
element-web-1.11.26.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1cf8631e991d86845f43015be3810f2ed3ab79f258f1badbd925fd88a04e3f42
size 1480006

13
element-web.changes
View File

@ -1,3 +1,16 @@
-------------------------------------------------------------------
Tue Mar 28 15:00:35 UTC 2023 - Dominik Heidler <dheidler@suse.de>
- Version 1.11.26
## 🐛 Bug Fixes
* Changes for matrix-js-sdk v24.0.0
* Changes for matrix-react-sdk v3.69.0
-------------------------------------------------------------------
Tue Mar 28 09:43:30 UTC 2023 - Dominik Heidler <dheidler@suse.de>
- Fix for CVE-2023-28427 and CVE-2023-28103
-------------------------------------------------------------------
Tue Mar 28 09:11:12 UTC 2023 - Dominik Heidler <dheidler@suse.de>

4
element-web.spec
View File

@ -17,9 +17,10 @@
Name: element-web
Version: 1.11.25
Version: 1.11.26
Release: 0
Summary: A glossy Matrix collaboration client - web files
Group: Productivity/Networking/Talk/Clients
License: Apache-2.0
URL: https://github.com/vector-im/element-web
Source0: https://github.com/vector-im/element-web/archive/v%{version}.tar.gz#/element-web-%{version}.tar.gz
@ -27,7 +28,6 @@ Source1: npm-packages-offline-cache.tar.gz
Source2: jitsi_external_api.min.js
Source3: prepare.sh
Patch0: fix-webpack-oom.patch
Patch1: webpack-fix-openssl3.patch
BuildRequires: yarn
BuildRequires: nodejs-packaging
BuildRequires: fdupes

4
npm-packages-offline-cache.tar.gz
View File

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:488f1e97383fd89473af59e4c7ad91d726fc96e398c6f90b94c962543874b693
size 96871081
oid sha256:76c40a6504c0a4b7eaf46ebda33ad0466ace3868fcc9c9940745ba4b9fefdaef
size 96884475

16
webpack-fix-openssl3.patch
View File

@ -1,16 +0,0 @@
Index: element-web-1.11.20/webpack.config.js
===================================================================
--- element-web-1.11.20.orig/webpack.config.js 2023-01-20 13:52:01.000000000 +0100
+++ element-web-1.11.20/webpack.config.js 2023-01-27 13:16:14.405927597 +0100
@@ -1,5 +1,11 @@
/* eslint-disable quote-props */
+// HACK: OpenSSL 3 does not support md4 any more, but webpack hardcodes it all
+// over the place: https://github.com/webpack/webpack/issues/13572
+const crypto = require("crypto");
+const crypto_orig_createHash = crypto.createHash;
+crypto.createHash = algorithm => crypto_orig_createHash(algorithm == "md4" ? "sha256" : algorithm);
+
const dotenv = require("dotenv");
const path = require("path");
const webpack = require("webpack");