Rocket.Chat 8.4.5
Patch release with security hotfixes and permission checks. Updates include enhanced authorization for token generation and consistent room permission validation for team operations, plus dependency updates for core typings and models.
Engine versions
- Node:
22.22.2 - Deno:
2.3.1 - MongoDB:
8.0 - Apps-Engine:
1.62.0
Patch Changes
-
Bump @rocket.chat/meteor version.
-
Bump @rocket.chat/meteor version.
-
(#41236 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41245 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41294 by @dionisio-bot) Ensures the
users.CreateTokenendpoint checks for theuser-generate-access-tokenpermission when generating a login token for another user -
(#41278 by @dionisio-bot) Ensures room permission checks are applied consistently regardless of how the room is identified when converting a channel to a team or creating a team from an existing room
-
Updated dependencies [bd53954]:
- @rocket.chat/core-typings@8.4.5
- @rocket.chat/model-typings@2.2.3
- @rocket.chat/models@2.2.3
- @rocket.chat/rest-typings@8.4.5
Source: original entry ↗