Add security notice

pull/14903/head
J. Ryan Stinnett 2020-08-05 16:52:16 +01:00
parent 04afd0232b
commit b199f55d1c
1 changed files with 14 additions and 0 deletions

View File

@ -1,5 +1,19 @@
Changes in [1.7.3](https://github.com/vector-im/element-web/releases/tag/v1.7.3) (2020-08-05)
=============================================================================================
## Security notice
Element Web 1.7.3 (as well as the earlier release 1.7.2) fixes an issue where
replying to a specially formatted message would make it seem like the replier
said something they did not. Thanks to Sorunome for responsibly disclosing this
via Matrix's Security Disclosure Policy.
Element Web 1.7.3 (as well as the earlier release 1.7.2) fixes an issue where an
unexpected language ID in a code block could cause Element to crash. Thanks to
SakiiR for responsibly disclosing this via Matrix's Security Disclosure Policy.
## All changes
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.3-rc.1...v1.7.3)
* Upgrade to React SDK 3.1.0 and JS SDK 8.0.1