Skip to content

Ghostly 1.3.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Oct 17:24
· 5524 commits to dev since this release
v1.3.2
9832fe4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Ghostly 1.3.2 is a patch with security fixes. Update when you can.

Security

This release fixes flaws reported privately. Their advisories are published once the release is out: https://github.com/MiguelMedeiros/ghostly/security/advisories

  • Chats: a crafted voice message or video can no longer make the app run out of memory, and a payment link for another token is no longer shown as USDT.
  • Desktop (Linux): right-clicking a playing video no longer offers to copy its private stream address.
  • Payments: a request always shows the network of its address, and "Pay with another wallet" never offers real money under a "Test money" label or an invoice for another amount. Ecash, LNURL and Fedimint payments get stricter checks.
  • Private groups and group files: invitations, damaged or slow file holders, voice messages and leaving a group while a file arrives are all handled more safely.
  • Mini-apps: an app can no longer delay the profile's other writes or keep writing after you uninstall it.
  • CLI: a contact can no longer take over a chat or group name you use, fill the event journal, or hold many connections with calls that ring and hang up.

Fixed

  • After Allow and open on an app that comes with Ghostly, the keyboard focus is on the question of which chat to open it in.

The full list is in the changelog.

Assets 14
Loading