Skip to content
This repository was archived by the owner on Sep 11, 2024. It is now read-only.

Commit 24d2495

Browse files
committed
Prepare changelog for v3.15.0
1 parent ebb7820 commit 24d2495

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

CHANGELOG.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,19 @@
1+
Changes in [3.15.0](https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.15.0) (2021-03-01)
2+
=====================================================================================================
3+
[Full Changelog](https://github.com/matrix-org/matrix-react-sdk/compare/v3.15.0-rc.1...v3.15.0)
4+
5+
## Security notice
6+
7+
matrix-react-sdk 3.15.0 fixes a low severity issue (CVE-2021-21320) where the
8+
user content sandbox can be abused to trick users into opening unexpected
9+
documents. The content is opened with a `blob` origin that cannot access Matrix
10+
user data, so messages and secrets are not at risk. Thanks to @keerok for
11+
responsibly disclosing this via Matrix's Security Disclosure Policy.
12+
13+
## All changes
14+
15+
* Upgrade to JS SDK 9.8.0
16+
117
Changes in [3.15.0-rc.1](https://github.com/matrix-org/matrix-react-sdk/releases/tag/v3.15.0-rc.1) (2021-02-24)
218
===============================================================================================================
319
[Full Changelog](https://github.com/matrix-org/matrix-react-sdk/compare/v3.14.0...v3.15.0-rc.1)

0 commit comments

Comments
 (0)