Cinny Files

Security release

This release includes a vulnerability fix. Please update to it as soon as possible. Details for the vulnerability will be posted later on. As a safety measure, please logout and login your account from Cinny once. Note: Make sure you have working key-backup or take a manual backup for the encrypted chat keys before logging out.

Special thanks to @Quasar0147 and @mat-1 for finding and reporting the vulnerability!

What's Changed

• Fix typo: change "Advance Options" to "Advanced Options" (https://github.com/cinnyapp/cinny/pull/2537)
• Fix read marker triggering room-wide notifications on alias mention (https://github.com/cinnyapp/cinny/pull/2562)
• Replace envs.net with unredacted.org in config (https://github.com/cinnyapp/cinny/pull/2601)
• Hide "Delete Message" button if it is forbidden (https://github.com/cinnyapp/cinny/pull/2602)
• Fix muted rooms showing unread badges (https://github.com/cinnyapp/cinny/pull/2581)
• fix(deps): update dependency react-router-dom to v6.30.3 (https://github.com/cinnyapp/cinny/pull/2612)
• Post session info to service worker instead of asking from it (https://github.com/cinnyapp/cinny/pull/2605)
• Prevent invalid mxc from getting used (https://github.com/cinnyapp/cinny/pull/2609)
• Add noreferrer to sanitized links for improved privacy consistency (https://github.com/cinnyapp/cinny/pull/2628)

New Contributors

• @42willow made their first contribution in https://github.com/cinnyapp/cinny/pull/2537
• @Santhoshkumar044 made their first contribution in https://github.com/cinnyapp/cinny/pull/2562
• @lunarthegrey made their first contribution in https://github.com/cinnyapp/cinny/pull/2601
• @andrewmurphyio made their first contribution in https://github.com/cinnyapp/cinny/pull/2581
• @RinZ27 made their first contribution in https://github.com/cinnyapp/cinny/pull/2628

Full Changelog: https://github.com/cinnyapp/cinny/compare/v4.10.2...v4.10.3