This repository was archived by the owner on Sep 11, 2024. It is now read-only.
File tree Expand file tree Collapse file tree 1 file changed +16
-0
lines changed Expand file tree Collapse file tree 1 file changed +16
-0
lines changed Original file line number Diff line number Diff line change
1
+ Changes in [3.15.0](https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.15.0) (2021-03-01)
2
+ =====================================================================================================
3
+ [Full Changelog](https://github.com/matrix-org/matrix-react-sdk/compare/v3.15.0-rc.1...v3.15.0)
4
+
5
+ ## Security notice
6
+
7
+ matrix-react-sdk 3.15.0 fixes a low severity issue (CVE-2021-21320) where the
8
+ user content sandbox can be abused to trick users into opening unexpected
9
+ documents. The content is opened with a `blob` origin that cannot access Matrix
10
+ user data, so messages and secrets are not at risk. Thanks to @keerok for
11
+ responsibly disclosing this via Matrix's Security Disclosure Policy.
12
+
13
+ ## All changes
14
+
15
+ * Upgrade to JS SDK 9.8.0
16
+
1
17
Changes in [3.15.0-rc.1](https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.15.0-rc.1) (2021-02-24)
2
18
===============================================================================================================
3
19
[Full Changelog](https://github.com/matrix-org/matrix-react-sdk/compare/v3.14.0...v3.15.0-rc.1)
You can’t perform that action at this time.
0 commit comments