v0.8.0
https://lily-is.land/kazv/libkazv/-/releases/v0.8.0
0.8.0
libkazv 0.8.0 uses the vodozemac crypto library instead of the deprecated olm, and fixes a security vulnerability that might have allowed the replacement of the session key of a megolm session. There are also several small enhancements.
Security
- Prevent session replacement attack. https://iron.lily-is.land/D202 by tusooa
Added
- Add Room::localEcho and related test. https://iron.lily-is.land/D156 by nannanko
- Port InboundGroupSession to vodozemac. https://iron.lily-is.land/D159 by tusooa
- Port OutboundGroupsession to vodozemac. https://iron.lily-is.land/D160 by tusooa
- Port Crypto and Session to vodozemac. https://iron.lily-is.land/D161 by tusooa
- Add function to get the original m.relates_to object of events. https://iron.lily-is.land/D193 by tusooa
Fixed
- Do not add an optional null json value to request body. https://iron.lily-is.land/D162 by tusooa
- Fix gap incorrectly introduced when limited field is missing from sync. https://iron.lily-is.land/D163 by tusooa
- Make invalid megolm sessions copyable. https://iron.lily-is.land/D164 by tusooa
- Fix room account data not emitted properly. https://iron.lily-is.land/D165 by tusooa
- Ensure fallback has been inserted when decrypt failure occurs. https://iron.lily-is.land/D173 by tusooa
- Set cryptopp as private link lib for libkazvcrypto. https://iron.lily-is.land/D184 by tusooa
- Fix stuck on generating one-time keys. https://iron.lily-is.land/D186 by tusooa
- Update local read marker before posting read receipt. https://iron.lily-is.land/D204 by tusooa
Internal changes
- Add generate-libolm-crypto-dump tool. https://iron.lily-is.land/D157 by tusooa
- Find vodozemac as a dependency. https://iron.lily-is.land/D158 by tusooa
- Add junit report. https://lily-is.land/kazv/libkazv/-/merge_requests/79 by tusooa
- Ask lager and immer to always use exceptions. https://iron.lily-is.land/D185 by tusooa
- Use podman to build images and enable ccache. https://lily-is.land/kazv/libkazv/-/merge_requests/81 by tusooa
- Add test to verify it accepts a room key event. https://iron.lily-is.land/D203 by tusooa