From b199f55d1cfae42c68d86f09c84cba2868a78c1d Mon Sep 17 00:00:00 2001 From: "J. Ryan Stinnett" Date: Wed, 5 Aug 2020 16:52:16 +0100 Subject: [PATCH] Add security notice --- CHANGELOG.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2a5d9fe75f..90d58b4932 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,19 @@ Changes in [1.7.3](https://github.com/vector-im/element-web/releases/tag/v1.7.3) (2020-08-05) ============================================================================================= + +## Security notice + +Element Web 1.7.3 (as well as the earlier release 1.7.2) fixes an issue where +replying to a specially formatted message would make it seem like the replier +said something they did not. Thanks to Sorunome for responsibly disclosing this +via Matrix's Security Disclosure Policy. + +Element Web 1.7.3 (as well as the earlier release 1.7.2) fixes an issue where an +unexpected language ID in a code block could cause Element to crash. Thanks to +SakiiR for responsibly disclosing this via Matrix's Security Disclosure Policy. + +## All changes + [Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.3-rc.1...v1.7.3) * Upgrade to React SDK 3.1.0 and JS SDK 8.0.1