diff --git a/CHANGELOG.md b/CHANGELOG.md index 928ea944..7af2ceb2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,18 @@ # Changelog +## [0.10.2] -- 2022-09-22 + +### Security release + +- Fixes potential secret poisoning by the homeserver +- A crash when validation malicious html + +Thanks to the matrix.org security team for disclosing this issue. + +An update is highly recommended. Otherwise you can temporarily protect against +this issue by not verifying your own devices and not pressing the request button +in the setting. + ## [0.10.1] -- 2022-09-07 ### Highlights diff --git a/CMakeLists.txt b/CMakeLists.txt index da5f29ae..d8088376 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -108,7 +108,7 @@ include(GNUInstallDirs) set(CPACK_PACKAGE_VERSION_MAJOR "0") set(CPACK_PACKAGE_VERSION_MINOR "10") -set(CPACK_PACKAGE_VERSION_PATCH "1") +set(CPACK_PACKAGE_VERSION_PATCH "2") set(PROJECT_VERSION_MAJOR ${CPACK_PACKAGE_VERSION_MAJOR}) set(PROJECT_VERSION_MINOR ${CPACK_PACKAGE_VERSION_MINOR}) set(PROJECT_VERSION_PATCH ${CPACK_PACKAGE_VERSION_PATCH}) diff --git a/appveyor.yml b/appveyor.yml index f0930d19..0db56109 100644 --- a/appveyor.yml +++ b/appveyor.yml @@ -1,6 +1,6 @@ --- -version: 0.10.1-{build} +version: 0.10.2-{build} configuration: Release image: Visual Studio 2019 @@ -31,8 +31,8 @@ build_script: # VERSION format: branch-master/branch-1.2 # INSTVERSION format: x.y.z # WINVERSION format: 9999.0.0.123/1.2.0.234 - - if "%APPVEYOR_REPO_TAG%"=="false" set INSTVERSION=0.10.1 - - if "%APPVEYOR_REPO_TAG%"=="false" set VERSION=0.10.1 + - if "%APPVEYOR_REPO_TAG%"=="false" set INSTVERSION=0.10.2 + - if "%APPVEYOR_REPO_TAG%"=="false" set VERSION=0.10.2 - if "%APPVEYOR_REPO_TAG%"=="false" if "%APPVEYOR_REPO_BRANCH%"=="master" set INSTVERSION=9999.0 - if "%APPVEYOR_REPO_TAG%"=="false" set WINVERSION=%INSTVERSION%.0.%APPVEYOR_BUILD_NUMBER% # VERSION format: v1.2.3/v1.3.4 @@ -94,8 +94,8 @@ after_build: - copy %BUILD%\deploy\installer\gui\package.xml installer\packages\io.github.nhekoreborn.nheko\meta - copy %BUILD%\deploy\installer\gui\installscript.qs installer\packages\io.github.nhekoreborn.nheko\meta # Amend version and date - - sed -i "s/__VERSION__/0.10.1/" installer\config\config.xml - - sed -i "s/__VERSION__/0.10.1/" installer\packages\io.github.nhekoreborn.nheko\meta\package.xml + - sed -i "s/__VERSION__/0.10.2/" installer\config\config.xml + - sed -i "s/__VERSION__/0.10.2/" installer\packages\io.github.nhekoreborn.nheko\meta\package.xml - sed -i "s/__DATE__/%DATE%/" installer\packages\io.github.nhekoreborn.nheko\meta\package.xml # Copy nheko data - xcopy NhekoData\*.* installer\packages\io.github.nhekoreborn.nheko\data\*.* /s /e /c /y diff --git a/io.github.NhekoReborn.Nheko.yaml b/io.github.NhekoReborn.Nheko.yaml index e7684652..b5aea92e 100644 --- a/io.github.NhekoReborn.Nheko.yaml +++ b/io.github.NhekoReborn.Nheko.yaml @@ -23,17 +23,11 @@ cleanup: - /bin/mdb* - '*.a' - /libexec - - /lib/girepository-1.0/ - - /lib/gst-validate-launcher/ - - /lib/gstreamer-1.0/include/ - - /lib/gstreamer-1.0/validate/ - /lib/cmake/ - - /bin/gst-* - /bin/cmark - /bin/event_rpcgen.py - /bin/playout - /bin/secret-tool - - /share/gir-1.0 modules: - name: lmdb sources: @@ -151,30 +145,6 @@ modules: - sha256: 1155fd1a83049767360e9a120c43c578145db3204d2b309eba49fbbedd0f4ed3 type: archive url: https://github.com/nlohmann/json/archive/v3.10.4.tar.gz - - buildsystem: meson - name: gstreamer - sources: - - commit: ccf22e315cedf81e0075ab179ffb1b733da5206e - tag: 1.20.3 - type: git - url: https://gitlab.freedesktop.org/gstreamer/gstreamer.git - config-opts: - - -Dcompositor=enabled - - -Dgl=enabled - - -Dgood=enabled - - -Dgst-plugins-good:pulse=enabled - - -Dgst-plugins-good:qt5=enabled - - -Dgst-plugins-good:rtp=enabled - - -Dgst-plugins-good:rtpmanager=enabled - - -Dgst-plugins-good:vpx=enabled - - -Dbad=enabled - - -Dgst-plugins-bad:dtls=enabled - - -Dgst-plugins-bad:gl=enabled - - -Dgst-plugins-bad:openh264=enabled - - -Dgst-plugins-bad:opus=enabled - - -Dgst-plugins-bad:srtp=enabled - - -Dgst-plugins-bad:webrtc=enabled - - -Dgst-plugins-bad:flite=disabled - buildsystem: qmake name: qt-jdenticon no-make-install: true diff --git a/resources/nheko.appdata.xml.in b/resources/nheko.appdata.xml.in index 5d6a87fb..58372b72 100644 --- a/resources/nheko.appdata.xml.in +++ b/resources/nheko.appdata.xml.in @@ -61,6 +61,7 @@ https://github.com/Nheko-Reborn/nheko https://github.com/Nheko-Reborn +