Rocket.Chat 8.3.7
Patch release with security hotfixes and permission enforcement improvements. Fixes user token generation permission checks and ensures consistent room permission validation when converting channels to teams.
Engine versions
- Node:
22.16.0 - Deno:
1.43.5 - MongoDB:
8.0 - Apps-Engine:
1.61.1
Patch Changes
-
Bump @rocket.chat/meteor version.
-
(#41237 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41246 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41295 by @dionisio-bot) Ensures the
users.CreateTokenendpoint checks for theuser-generate-access-tokenpermission when generating a login token for another user -
(#41280 by @dionisio-bot) Ensures room permission checks are applied consistently regardless of how the room is identified when converting a channel to a team or creating a team from an existing room
-
Updated dependencies [c15e433]:
- @rocket.chat/core-typings@8.3.7
- @rocket.chat/model-typings@2.1.7
- @rocket.chat/models@2.1.7
- @rocket.chat/rest-typings@8.3.7
Source: original entry ↗