From 3d90242abac98e5344fc70404a30e51214ce3efb Mon Sep 17 00:00:00 2001 From: RiotRobot Date: Mon, 24 May 2021 17:40:21 +0100 Subject: [PATCH] Prepare changelog for v1.7.29 --- CHANGELOG.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 42065c9fc6..c2f6f82361 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,20 @@ +Changes in [1.7.29](https://github.com/vector-im/element-web/releases/tag/v1.7.29) (2021-05-24) +=============================================================================================== +[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.29-rc.1...v1.7.29) + +## Security notice + +Element Web 1.7.29 fixes (by upgrading to olm 3.2.3) an issue in code used for +decrypting server-side stored secrets. The issue could potentially allow a +malicious homeserver to cause a stack buffer overflow in the affected function +and to control that function's local variables. + +## All changes + + * Upgrade to React SDK 3.22.0 and JS SDK 11.1.0 + * [Release] Bump libolm dependency, and update package name + [\#17456](https://github.com/vector-im/element-web/pull/17456) + Changes in [1.7.29-rc.1](https://github.com/vector-im/element-web/releases/tag/v1.7.29-rc.1) (2021-05-19) ========================================================================================================= [Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.28...v1.7.29-rc.1)