diff --git a/CHANGES.md b/CHANGES.md index 195008a0c2..2eb5240608 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,3 +1,10 @@ +Changes in Element v1.6.34 (2025-03-07) +======================================= + +Security fixes 🔐 +----------------- +- Fix for [GHSA-632v-9pm3-m8ch](https://github.com/element-hq/element-android/security/advisories/GHSA-632v-9pm3-m8ch) / [CVE-2025-27606](https://www.cve.org/CVERecord?id=CVE-2025-27606) + Changes in Element v1.6.32 (2025-02-18) ======================================= diff --git a/fastlane/metadata/android/en-US/changelogs/40106340.txt b/fastlane/metadata/android/en-US/changelogs/40106340.txt new file mode 100644 index 0000000000..6563fef2e4 --- /dev/null +++ b/fastlane/metadata/android/en-US/changelogs/40106340.txt @@ -0,0 +1,2 @@ +Main changes in this version: Improve security. +Full changelog: https://github.com/element-hq/element-android/releases diff --git a/vector/src/main/java/im/vector/app/features/MainActivity.kt b/vector/src/main/java/im/vector/app/features/MainActivity.kt index fcedb7c21a..6b16c2deb8 100644 --- a/vector/src/main/java/im/vector/app/features/MainActivity.kt +++ b/vector/src/main/java/im/vector/app/features/MainActivity.kt @@ -61,6 +61,7 @@ import javax.inject.Inject data class MainActivityArgs( val clearCache: Boolean = false, val clearCredentials: Boolean = false, + val ignoreLogoutServerError: Boolean = false, val isUserLoggedOut: Boolean = false, val isAccountDeactivated: Boolean = false, val isSoftLogout: Boolean = false @@ -238,6 +239,7 @@ class MainActivity : VectorBaseActivity(), UnlockedActivity return MainActivityArgs( clearCache = argsFromIntent?.clearCache ?: false, clearCredentials = argsFromIntent?.clearCredentials ?: false, + ignoreLogoutServerError = argsFromIntent?.ignoreLogoutServerError ?: false, isUserLoggedOut = argsFromIntent?.isUserLoggedOut ?: false, isAccountDeactivated = argsFromIntent?.isAccountDeactivated ?: false, isSoftLogout = argsFromIntent?.isSoftLogout ?: false @@ -263,7 +265,7 @@ class MainActivity : VectorBaseActivity(), UnlockedActivity } } args.clearCredentials -> { - signout(session, onboardingStore, ignoreServerError = false) + signout(session, onboardingStore, ignoreServerError = args.ignoreLogoutServerError) } args.clearCache -> { lifecycleScope.launch { diff --git a/vector/src/main/java/im/vector/app/features/pin/PinFragment.kt b/vector/src/main/java/im/vector/app/features/pin/PinFragment.kt index 0dafe88118..effe976ce3 100644 --- a/vector/src/main/java/im/vector/app/features/pin/PinFragment.kt +++ b/vector/src/main/java/im/vector/app/features/pin/PinFragment.kt @@ -162,6 +162,12 @@ class PinFragment : } private fun launchResetPinFlow() { - MainActivity.restartApp(requireActivity(), MainActivityArgs(clearCredentials = true)) + MainActivity.restartApp( + activity = requireActivity(), + args = MainActivityArgs( + clearCredentials = true, + ignoreLogoutServerError = true, + ) + ) } }