Skip to content

26.09.4

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Nov 14:20
Immutable release. Only release title and notes can be modified.
26.09.4
c06370f

What's Changed

⚠️ This update contains important security fixes. Please upgrade as soon as possible.

  • Shared decks could execute arbitrary code via iframes when viewed in the editor (GHSA-j9v5-m549-cg6c). Thanks to @DePierre for the report.
  • On macOS, shared decks could execute arbitrary commands via specially crafted image filenames when the "Show in Folder" editor action is used (GHSA-gfvm-4968-jp9m). Thanks to @hyperreality and @Hama1cco for the reports.
  • Compromised eMudhra intermediate CA certificates are now disallowed. This is in response to a widespread security incident affecting most systems and web browsers. Updating Anki might not be enough. Please make sure your system is fully up to date.

Full Changelog: 26.09.3...26.09.4

Contributors

DePierre, hyperreality, and Hama1cco
Assets 9
Loading