From 2ba9c13165da3e6e7162f9d73b9b88110df54e5c Mon Sep 17 00:00:00 2001 From: RiotRobot Date: Wed, 28 Sep 2022 14:20:28 +0100 Subject: [PATCH 1/4] Upgrade matrix-js-sdk to 19.7.0 --- package.json | 2 +- yarn.lock | 17 +++++++++++++++++ 2 files changed, 18 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index f13668c774..471f76ea70 100644 --- a/package.json +++ b/package.json @@ -61,7 +61,7 @@ "gfm.css": "^1.1.2", "jsrsasign": "^10.5.25", "katex": "^0.16.0", - "matrix-js-sdk": "19.6.0", + "matrix-js-sdk": "19.7.0", "matrix-react-sdk": "3.55.0", "matrix-widget-api": "^1.1.1", "prop-types": "^15.7.2", diff --git a/yarn.lock b/yarn.lock index caa875349c..1012bfefb6 100644 --- a/yarn.lock +++ b/yarn.lock @@ -8225,6 +8225,23 @@ matrix-js-sdk@19.6.0: request "^2.88.2" unhomoglyph "^1.0.6" +matrix-js-sdk@19.7.0: + version "19.7.0" + resolved "https://registry.yarnpkg.com/matrix-js-sdk/-/matrix-js-sdk-19.7.0.tgz#ccadae630c56032b040c87b163475a04601409ce" + integrity sha512-mFN1LBmEpYHCH6II1F8o7y8zJr0kn1yX7ga7tRXHbLJAlBS4bAXRsEoAzdv6OrV8/dS325JlVUYQLHFHQWjYxg== + dependencies: + "@babel/runtime" "^7.12.5" + another-json "^0.2.0" + browser-request "^0.3.3" + bs58 "^5.0.0" + content-type "^1.0.4" + loglevel "^1.7.1" + matrix-events-sdk "^0.0.1-beta.7" + p-retry "4" + qs "^6.9.6" + request "^2.88.2" + unhomoglyph "^1.0.6" + matrix-mock-request@^2.0.0: version "2.1.2" resolved "https://registry.yarnpkg.com/matrix-mock-request/-/matrix-mock-request-2.1.2.tgz#11e38ed1233dced88a6f2bfba1684d5c5b3aa2c2" From a529afc1337e05e80c9e5ea8b218fe87a2d0a36c Mon Sep 17 00:00:00 2001 From: RiotRobot Date: Wed, 28 Sep 2022 14:20:52 +0100 Subject: [PATCH 2/4] Upgrade matrix-react-sdk to 3.56.0 --- package.json | 2 +- yarn.lock | 27 +++++---------------------- 2 files changed, 6 insertions(+), 23 deletions(-) diff --git a/package.json b/package.json index 471f76ea70..bcf39b33ee 100644 --- a/package.json +++ b/package.json @@ -62,7 +62,7 @@ "jsrsasign": "^10.5.25", "katex": "^0.16.0", "matrix-js-sdk": "19.7.0", - "matrix-react-sdk": "3.55.0", + "matrix-react-sdk": "3.56.0", "matrix-widget-api": "^1.1.1", "prop-types": "^15.7.2", "react": "17.0.2", diff --git a/yarn.lock b/yarn.lock index 1012bfefb6..d4cd0a1566 100644 --- a/yarn.lock +++ b/yarn.lock @@ -8208,23 +8208,6 @@ matrix-events-sdk@^0.0.1-beta.7: resolved "https://registry.yarnpkg.com/matrix-events-sdk/-/matrix-events-sdk-0.0.1-beta.7.tgz#5ffe45eba1f67cc8d7c2377736c728b322524934" integrity sha512-9jl4wtWanUFSy2sr2lCjErN/oC8KTAtaeaozJtrgot1JiQcEI4Rda9OLgQ7nLKaqb4Z/QUx/fR3XpDzm5Jy1JA== -matrix-js-sdk@19.6.0: - version "19.6.0" - resolved "https://registry.yarnpkg.com/matrix-js-sdk/-/matrix-js-sdk-19.6.0.tgz#8e531b4d140f98f5c3d8c2aca1e7fae2ef839f3e" - integrity sha512-VU+FTixX+NfWeUbFNR1I0+RUQlXJCoYrg+qDcYje0faalcRN2zWJmS2KWD0hXIqXQS2q44zbPc7WzpPjd0ToAQ== - dependencies: - "@babel/runtime" "^7.12.5" - another-json "^0.2.0" - browser-request "^0.3.3" - bs58 "^5.0.0" - content-type "^1.0.4" - loglevel "^1.7.1" - matrix-events-sdk "^0.0.1-beta.7" - p-retry "4" - qs "^6.9.6" - request "^2.88.2" - unhomoglyph "^1.0.6" - matrix-js-sdk@19.7.0: version "19.7.0" resolved "https://registry.yarnpkg.com/matrix-js-sdk/-/matrix-js-sdk-19.7.0.tgz#ccadae630c56032b040c87b163475a04601409ce" @@ -8249,10 +8232,10 @@ matrix-mock-request@^2.0.0: dependencies: expect "^28.1.0" -matrix-react-sdk@3.55.0: - version "3.55.0" - resolved "https://registry.yarnpkg.com/matrix-react-sdk/-/matrix-react-sdk-3.55.0.tgz#949a43167a2f3db44a520c2957ae356cd6aa0b6e" - integrity sha512-V6om14XA1UBQ3c3Xo4nfQpgiCOIqddFCy1eP38lytMH3+OLVlYvnztexvHtXtqFJbb7iW6xDAT89e+sPw3HziA== +matrix-react-sdk@3.56.0: + version "3.56.0" + resolved "https://registry.yarnpkg.com/matrix-react-sdk/-/matrix-react-sdk-3.56.0.tgz#28bc382150b0cee959633bebe74c2fdd02bbf5dc" + integrity sha512-VzyhqeoRu1rNhnvpTXYcfFrcqoIVxN19JQHWaeKYj88R6Q94c8Bxdyc59Bhx3J1SlNboEPFbjypNZ8f22HcFwQ== dependencies: "@babel/runtime" "^7.12.5" "@matrix-org/analytics-events" "^0.2.0" @@ -8292,7 +8275,7 @@ matrix-react-sdk@3.55.0: maplibre-gl "^1.15.2" matrix-encrypt-attachment "^1.0.3" matrix-events-sdk "^0.0.1-beta.7" - matrix-js-sdk "19.6.0" + matrix-js-sdk "19.7.0" matrix-widget-api "^1.1.1" minimist "^1.2.5" opus-recorder "^8.0.3" From 3eba2211ca7490db9183695119a363ad3c72491a Mon Sep 17 00:00:00 2001 From: RiotRobot Date: Wed, 28 Sep 2022 14:22:49 +0100 Subject: [PATCH 3/4] Prepare changelog for v1.11.7 --- CHANGELOG.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2c59123d0a..dfec49a1f0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,12 @@ +Changes in [1.11.7](https://github.com/vector-im/element-web/releases/tag/v1.11.7) (2022-09-28) +=============================================================================================== + +## 🔒 Security +* Fix for [CVE-2022-39249](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39249) +* Fix for [CVE-2022-39250](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39250) +* Fix for [CVE-2022-39251](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39251) +* Fix for [CVE-2022-39236](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=CVE%2D2022%2D39236) + Changes in [1.11.6](https://github.com/vector-im/element-web/releases/tag/v1.11.6) (2022-09-20) ========================================================================================================= From 981a64aac474447f8a5154d8c8585936bd8dd46b Mon Sep 17 00:00:00 2001 From: RiotRobot Date: Wed, 28 Sep 2022 14:22:49 +0100 Subject: [PATCH 4/4] v1.11.7 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index bcf39b33ee..bf05a6cc85 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "element-web", - "version": "1.11.6", + "version": "1.11.7", "description": "A feature-rich client for Matrix.org", "author": "New Vector Ltd.", "repository": {