Skip to content

Commit

Permalink
chore: Bump version to 0.12.2
Browse files Browse the repository at this point in the history
  • Loading branch information
inexcode committed Aug 23, 2024
1 parent d546093 commit d260a64
Show file tree
Hide file tree
Showing 3 changed files with 54 additions and 2 deletions.
2 changes: 1 addition & 1 deletion appimage.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ AppDir:
id: org.selfprivacy.app
name: SelfPrivacy
icon: org.selfprivacy.app
version: 0.12.1
version: 0.12.2
exec: selfprivacy
exec_args: $@
apt:
Expand Down
52 changes: 52 additions & 0 deletions fastlane/metadata/android/en-US/changelogs/0.12.2.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,52 @@
# 0.12.2 Changelog

## Vulnerability disclosure

This release contains a fix for a security vulnerability. We recommend updating as soon as possible.

A security researcher discovered that the application used an insecure random number generator. This could allow an attacker to predict the random numbers generated by the application, which could lead to a variety of security issues.

While we believe the risk of exploitation is low, we recommend that you update the token on your original device:

1. Update the app to the latest version.
2. Go to the Devices screen at the "More" section.
3. Make sure that your device is named "Initial device". If it's not, do the steps on that initial device instead. If you don't have access to that device anymore, revoke the access for that device by tapping it in the list below.
4. Tap on the "Initial device". The app will ask you if you want to refresh the token. Tap "Confirm".

Only the token of the initial device might be vulnerable. Tokens of other devices and backups encryption key are generated by your server with a secure random number generator.

Servers created with this version and newer will not be vulnerable to this.

We haven't received information from the security researcher on how to credit them, and will update this changelog on our website and git forge when we do.

## Changes

### Features

- Allow refreshing device token for Server API ([#565](https://git.selfprivacy.org/SelfPrivacy/selfprivacy.org.app/issues/565))
- Upgrade Flutter to 3.24.0 ([#562](https://git.selfprivacy.org/SelfPrivacy/selfprivacy.org.app/issues/562))

### Bug fixes

- **i18l**: Resolve word puzzles ([#566](https://git.selfprivacy.org/SelfPrivacy/selfprivacy.org.app/issues/566))
- Use the cryptographically secure random number generator ([#565](https://git.selfprivacy.org/SelfPrivacy/selfprivacy.org.app/issues/565))
- Remove hardcode for recovery support articles ([#563](https://git.selfprivacy.org/SelfPrivacy/selfprivacy.org.app/issues/563), resolves [#251](https://git.selfprivacy.org/SelfPrivacy/selfprivacy.org.app/issues/251))
- Volume resize function didn't work due to logical error


### Translation contributions


* Estonian

* Dmitri B. (9)


* German

* Philipp Weiermann (23)


* Russian

* Inex Code (24)
2 changes: 1 addition & 1 deletion pubspec.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
name: selfprivacy
description: selfprivacy.org
publish_to: 'none'
version: 0.12.1+24
version: 0.12.2+25

environment:
sdk: '>=3.5.0 <4.0.0'
Expand Down

0 comments on commit d260a64

Please sign in to comment.