From b6386a3f98690a300810c6a8ac8ce697b9c537de Mon Sep 17 00:00:00 2001 From: qlrd <106913782+qlrd@users.noreply.github.com> Date: Sun, 17 Sep 2023 00:27:34 -0300 Subject: [PATCH] Updated from Urgent Security Issue Updated to Electron 26.2.1 Critical WebP bug: many apps, not just browsers, under threat The heap buffer overflow (CVE-2023-4863) vulnerability in the WebP Codec is being actively exploited in the wild --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 6586052c..cb912aef 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "krux-installer", - "version": "0.0.1-alpha-5", + "version": "0.0.1-alpha-6", "main": "dist-electron/main/index.js", "description": "Graphical User Interface to download, verify and flash Krux´s firmware on Kendryte K210 hardwares as bitcoin signature devices", "author": "qlrd <106913782+qlrd@users.noreply.github.com>", @@ -54,7 +54,7 @@ "@wdio/mocha-framework": "^8.12.1", "@wdio/spec-reporter": "^8.12.2", "chai": "^4.3.7", - "electron": "^26.0.0", + "electron": "^26.2.1", "electron-builder": "^24.4.0", "glob": "^10.3.3", "markdownlint-cli": "^0.36.0",