Questa è una versione precedente. La versione attuale è la 4.19.0. Rocket.Chat 4.19.0 · Data di rilascio:
File di installazione 4.18.4
| Architettura | Tipo | Ambito | Dimensione | Scarica | SHA256 |
|---|---|---|---|---|---|
| 64 bit | EXE (NSIS) | Utente corrente | — | github.com | VirusTotal |
| 64 bit | EXE (NSIS) | Tutti gli utenti | — | github.com | VirusTotal |
| ARM64 | EXE (NSIS) | Utente corrente | — | github.com | VirusTotal |
| ARM64 | EXE (NSIS) | Tutti gli utenti | — | github.com | VirusTotal |
| 32 bit | EXE (NSIS) | Utente corrente | — | github.com | VirusTotal |
| 32 bit | EXE (NSIS) | Tutti gli utenti | — | github.com | VirusTotal |
Link e hash SHA256 provengono dal manifest della community di Gestione pacchetti Windows. Prima di eseguire il file scaricato conviene confrontarne l’hash.
Note di rilascio
This is a security patch release. Update as soon as possible.
🐛 Fixes
- Distrust of the compromised eMudhra intermediate CA certificates. The private keys of eight eMudhra intermediate CA certificates are public. With one of these keys, an attacker on your network can impersonate any server. This release updates Electron to 42.11.17 (Chromium 148.0.7778.280). The app now rejects certificates from these intermediates with ERR_CERT_REVOKED. (#3615)
- No trust prompt for a revoked certificate. Before, the certificate error dialog also let you trust a revoked certificate, and the app remembered that choice. The app now rejects a revoked certificate with no dialog, like Chrome. A server with a self-signed or private-CA certificate still shows the dialog. (#3615)
Details of the compromise: https://emudhra.we-have-a-problem.com/https://github.com/RocketChat/Rocket.Chat.Electron/releases/tag/4.18.4
