Compare commits
8 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 5eb31cac36 | |||
| 35e40b1f9a | |||
| ec9b377f2f | |||
| 898ecd8e6b | |||
| ce21e6e34e | |||
| 066c36ca91 | |||
| 60faf367e5 | |||
| f46fef1a6c |
@@ -395,3 +395,5 @@ HWPML
|
|||||||
MCP
|
MCP
|
||||||
checkboxes
|
checkboxes
|
||||||
websocket
|
websocket
|
||||||
|
textarea
|
||||||
|
RCE
|
||||||
@@ -15,13 +15,35 @@ body:
|
|||||||
description: "If you know this bug occurs on multiple operating systems, select all you have tested."
|
description: "If you know this bug occurs on multiple operating systems, select all you have tested."
|
||||||
multiple: true
|
multiple: true
|
||||||
options:
|
options:
|
||||||
- Windows x64
|
- Windows
|
||||||
- Windows x86
|
- macOS
|
||||||
- macOS (ARM)
|
- Linux
|
||||||
- macOS (x86-64)
|
validations:
|
||||||
- Linux (DEB package)
|
required: true
|
||||||
- Linux (RPM package)
|
- type: dropdown
|
||||||
- other (specify in description)
|
id: architecture
|
||||||
|
attributes:
|
||||||
|
label: Architecture
|
||||||
|
description: "Select the architecture of the package you are using."
|
||||||
|
options:
|
||||||
|
- x86_64
|
||||||
|
- arm64
|
||||||
|
validations:
|
||||||
|
required: true
|
||||||
|
- type: dropdown
|
||||||
|
id: package-type
|
||||||
|
attributes:
|
||||||
|
label: Package Type
|
||||||
|
description: "Select the package type you are using."
|
||||||
|
options:
|
||||||
|
- exe
|
||||||
|
- msi
|
||||||
|
- dmg
|
||||||
|
- deb
|
||||||
|
- rpm
|
||||||
|
- flatpak
|
||||||
|
- snap
|
||||||
|
- appimage
|
||||||
validations:
|
validations:
|
||||||
required: true
|
required: true
|
||||||
- type: input
|
- type: input
|
||||||
@@ -58,6 +80,8 @@ body:
|
|||||||
1. Change font size to 16
|
1. Change font size to 16
|
||||||
2. Set font color to white
|
2. Set font color to white
|
||||||
3. Observe as the text is not white
|
3. Observe as the text is not white
|
||||||
|
validations:
|
||||||
|
required: true
|
||||||
- type: textarea
|
- type: textarea
|
||||||
id: additional
|
id: additional
|
||||||
attributes:
|
attributes:
|
||||||
|
|||||||
@@ -10,6 +10,6 @@ jobs:
|
|||||||
uses: vedantmgoyal9/winget-releaser@main
|
uses: vedantmgoyal9/winget-releaser@main
|
||||||
with:
|
with:
|
||||||
identifier: ONLYOFFICE.DesktopEditors
|
identifier: ONLYOFFICE.DesktopEditors
|
||||||
installers-regex: '(x86|x64)\.(exe|msi)$'
|
installers-regex: '(x86|x64|arm64)\.exe$'
|
||||||
token: ${{ secrets.WINGET_TOKEN }}
|
token: ${{ secrets.WINGET_TOKEN }}
|
||||||
|
|
||||||
|
|||||||
+120
@@ -1,5 +1,125 @@
|
|||||||
# Change log
|
# Change log
|
||||||
|
|
||||||
|
## 9.3.0
|
||||||
|
|
||||||
|
### New features
|
||||||
|
|
||||||
|
#### All Editors
|
||||||
|
|
||||||
|
* Added the Use AI functions option to the application settings
|
||||||
|
* Added Box and Dropbox cloud providers
|
||||||
|
* Added the Pin option to the Recent files and Recent folders lists on
|
||||||
|
the start page
|
||||||
|
* Added the ability to work with files in separate windows (macOS)
|
||||||
|
* Added the Open File option to the application settings to open a file in a separate
|
||||||
|
window (macOS)
|
||||||
|
* Implemented the ability to add hyperlinks to images, shapes, or groups
|
||||||
|
* Implemented all settings for texture fills for images
|
||||||
|
* Updated macro recording in documents, spreadsheets, and presentations
|
||||||
|
|
||||||
|
#### Document Editor
|
||||||
|
|
||||||
|
* Added Multiple pages view
|
||||||
|
* Added the Zoom to 100% and Multiple pages buttons to the View tab
|
||||||
|
* Changed the appearance of comments. Now a user's color is used and
|
||||||
|
the beginning and end of the comment are displayed
|
||||||
|
* Implemented the ability to select words/paragraphs by double/triple-clicking
|
||||||
|
the mouse
|
||||||
|
* Added saving to the `MD` format
|
||||||
|
* Moved header and footer settings to a separate Header & Footer tab
|
||||||
|
|
||||||
|
#### Spreadsheet Editor
|
||||||
|
|
||||||
|
* Added support for new functions: `REGEXTEST`, `REGEXREPLACE`, `REGEXEXTRACT`
|
||||||
|
* Improved work of the `COUNTIF` function
|
||||||
|
* Added support for dynamic arrays
|
||||||
|
* Added Solver for solving linear problems (Simplex LP)
|
||||||
|
* Changed the color of the resolved comment indicator
|
||||||
|
* Added the ability to select multiple separators when splitting text into columns/pasting
|
||||||
|
from the clipboard
|
||||||
|
* Added the Format button, which combines various functions for working with sheets/rows/columns
|
||||||
|
* Added support for `TSV` files for reading
|
||||||
|
* Added options for pasting from the clipboard for the Paste button on the top toolbar
|
||||||
|
|
||||||
|
#### Presentation Editor
|
||||||
|
|
||||||
|
* Added support for GIF animations playback in the slideshow demonstration mode
|
||||||
|
|
||||||
|
#### Forms
|
||||||
|
|
||||||
|
* Added the signature settings window with the ability to draw and add text to signatures
|
||||||
|
* Added the ability to stretch fixed forms to fit the table cell size using
|
||||||
|
the context menu
|
||||||
|
* Added the Protection tab, which duplicates the Protect functionality in the
|
||||||
|
`File` menu
|
||||||
|
* Added saving to the `MD` format
|
||||||
|
|
||||||
|
#### PDF Editor
|
||||||
|
|
||||||
|
* Added version history
|
||||||
|
* Added Multiple pages view
|
||||||
|
* Added the Zoom to 100% and Multiple pages buttons to the View tab
|
||||||
|
* Implemented a password prompt when enabling the Edit PDF mode if the file is
|
||||||
|
protected from editing
|
||||||
|
* Added support for Link annotations with the ability to add them both to
|
||||||
|
an area and to text on a page
|
||||||
|
* Added the ability to continue editing `PDF` using embedded fonts
|
||||||
|
* Added the ability to redact text using the auxiliary pop-up toolbar
|
||||||
|
* Added parameters for printing pages
|
||||||
|
|
||||||
|
#### Diagram
|
||||||
|
|
||||||
|
* Added print preview
|
||||||
|
|
||||||
|
### Fixes
|
||||||
|
|
||||||
|
#### Security
|
||||||
|
|
||||||
|
* Fixed several vulnerabilities with out-of-bounds read in `XLS` processing/conversion
|
||||||
|
(via `FilePass`, `HLink`, `rgXTI`.`itabLast`, `Formula` record `cce`, `ShapePropsStream`,
|
||||||
|
and `CRN`.`colLast` records/fields) leading to information leak and `ASLR` bypass
|
||||||
|
* Fixed vulnerabilities with untrusted pointer dereference in `XLS` processing/conversion
|
||||||
|
(via `pictFmla`.`cbBufInCtlStm` and other vectors) leading to information
|
||||||
|
leak and `ASLR` bypass
|
||||||
|
* Fixed a DOM-based XSS vulnerability when executing a macro using dynamic import()
|
||||||
|
(CVE-2021-43446, CVE-2023-50883, CVE-2024-44085)
|
||||||
|
* Fixed the vulnerability in the update service, that allows you to perform actions
|
||||||
|
with files with system privileges
|
||||||
|
|
||||||
|
## 9.2.1
|
||||||
|
|
||||||
|
### Fixes
|
||||||
|
|
||||||
|
#### Document Editor
|
||||||
|
|
||||||
|
* Fixed word break in Korean
|
||||||
|
|
||||||
|
#### Spreadsheet Editor
|
||||||
|
|
||||||
|
* Fixed an issue with data overlap when transferring sheets between documents
|
||||||
|
via Move or Copy
|
||||||
|
|
||||||
|
#### PDF Editor
|
||||||
|
|
||||||
|
* Fixed an error when opening a PDF file
|
||||||
|
* Fixed an error when scrolling pages in a PDF file
|
||||||
|
* Fixed errors when copying, pasting, and undoing actions with the Find panel in
|
||||||
|
PDF Editing mode
|
||||||
|
* Fixed an error when deleting a page from a document while working with the Find
|
||||||
|
panel in PDF Editing mode
|
||||||
|
|
||||||
|
#### Security
|
||||||
|
|
||||||
|
* Fixed the XSS injection in the Color theme name using a custom Prepared exploit
|
||||||
|
* Fixed the XSS injection of JS code in the Font field for the Multilevel list
|
||||||
|
settings window
|
||||||
|
* Fixed a vulnerability in the textarea of the comment editing form
|
||||||
|
* Fixed the possibility of memory manipulation when converting XLS to XLSX,
|
||||||
|
which can lead
|
||||||
|
to information leakage
|
||||||
|
* Fixed issues with memory manipulation when converting XLS to XLSX, which can
|
||||||
|
lead to RCE
|
||||||
|
|
||||||
## 9.2.0
|
## 9.2.0
|
||||||
|
|
||||||
### New features
|
### New features
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
[](https://www.gnu.org/licenses/agpl-3.0.en.html)
|
[](https://www.gnu.org/licenses/agpl-3.0.en.html)
|
||||||
 
|
 [](https://github.com/ONLYOFFICE/DesktopEditors/tags)
|
||||||
|
|
||||||
## Welcome to the ONLYOFFICE Desktop Editors repo!
|
## Welcome to the ONLYOFFICE Desktop Editors repo!
|
||||||
|
|
||||||
|
|||||||
+1
-1
Submodule core updated: e936b0e4e7...7043b36093
+1
-1
Submodule desktop-apps updated: f77df80f00...bc46371aa0
+1
-1
Submodule desktop-sdk updated: 81ab611fa4...6bd2051287
+1
-1
Submodule sdkjs updated: 1e81e7e844...aa78926242
+1
-1
Submodule web-apps updated: cd4d5b180e...1c8ca99878
Reference in New Issue
Block a user