chore: Release v1.18.2

This is a security-focussed release that also comes with some bugfixes. - We've added QOI image support and dropped some image support plugins that we haven't properly vetted. - We have added fuzzing tests for all the image plugins we do use (and filed some bugs for the ones we don't yet use). - We've fixed a heap buffer overflow in exif handling. This overflow was not a vulnerability (it was an out of bounds read that would mess up image rotations when receiving broken exif data). - We've added a setting to disable automatic image previews in chat. If you're very security-conscious and you have friends you don't trust, you may want to disable image previews. In the future, we'll add a per-friend setting for this. - We've fixed some bugs that caused multi-line messages to be received as a single line. This was caused by our defense-in-depth security measures that were a little too strict.
TokTok · Jan 13, 2025 · ac1a16e · ac1a16e
1 parent 4d9324a
commit ac1a16e
Show file tree

Hide file tree

Showing 6 changed files with 22 additions and 10 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,15 @@
+<a name="v1.18.2"></a>
+
+## v1.18.2 (2025-01-13)
+
+This is a security-focussed release that also comes with some bugfixes.
+
+- We've added QOI image support and dropped some image support plugins that we haven't properly vetted.
+- We have added fuzzing tests for all the image plugins we do use (and filed some bugs for the ones we don't yet use).
+- We've fixed a heap buffer overflow in exif handling. This overflow was not a vulnerability (it was an out of bounds read that would mess up image rotations when receiving broken exif data).
+- We've added a setting to disable automatic image previews in chat. If you're very security-conscious and you have friends you don't trust, you may want to disable image previews. In the future, we'll add a per-friend setting for this.
+- We've fixed some bugs that caused multi-line messages to be received as a single line. This was caused by our defense-in-depth security measures that were a little too strict.
+
 <a name="v1.18.2-rc.1"></a>
 
 ## v1.18.2-rc.1 (2025-01-12)

diff --git a/README.md b/README.md
@@ -167,19 +167,19 @@ AED3 1134 9C23 A123 E5C4  AA4B 139C A045 3DA2 D773
 ```
 
 [#[email protected]]: https://web.libera.chat/#qtox
-[64 bit release]: https://github.com/TokTok/qTox/releases/download/v1.18.2-rc.1/setup-qtox-x86_64-release.exe
-[32 bit release]: https://github.com/TokTok/qTox/releases/download/v1.18.2-rc.1/setup-qtox-i686-release.exe
+[64 bit release]: https://github.com/TokTok/qTox/releases/download/v1.18.2/setup-qtox-x86_64-release.exe
+[32 bit release]: https://github.com/TokTok/qTox/releases/download/v1.18.2/setup-qtox-i686-release.exe
 [32nightly]: https://github.com/TokTok/qTox/releases/download/nightly/qtox-nightly-i686-release.exe
 [64nightly]: https://github.com/TokTok/qTox/releases/download/nightly/qtox-nightly-x86_64-release.exe
-[Flatpak (64 bit)]: https://github.com/TokTok/qTox/releases/download/v1.18.2-rc.1/qTox-v1.18.2-rc.1.x86_64.flatpak
+[Flatpak (64 bit)]: https://github.com/TokTok/qTox/releases/download/v1.18.2/qTox-v1.18.2.x86_64.flatpak
 [Flatpak nightly (64 bit)]: https://github.com/TokTok/qTox/releases/download/nightly/qTox-nightly.flatpak
 [Arch]: /INSTALL.md#arch
 [Building instructions]: /INSTALL.md#os-x
 [Contributing]: /CONTRIBUTING.md#how-to-start-contributing
 [Debian]: https://packages.debian.org/search?keywords=qtox
 [easy issues]: https://github.com/qTox/qTox/labels/E-easy
-[Latest ARM64 release]: https://github.com/TokTok/qTox/releases/download/v1.18.2-rc.1/qTox-arm64.dmg
-[Latest Intel release]: https://github.com/TokTok/qTox/releases/download/v1.18.2-rc.1/qTox-x86_64.dmg
+[Latest ARM64 release]: https://github.com/TokTok/qTox/releases/download/v1.18.2/qTox-arm64.dmg
+[Latest Intel release]: https://github.com/TokTok/qTox/releases/download/v1.18.2/qTox-x86_64.dmg
 [Latest ARM64 nightly]: https://github.com/TokTok/qTox/releases/download/nightly/qTox-nightly-arm64.dmg
 [Latest Intel nightly]: https://github.com/TokTok/qTox/releases/download/nightly/qTox-nightly-x86_64.dmg
 [Fedora]: /INSTALL.md#fedora

diff --git a/macos/Info.plist b/macos/Info.plist
@@ -65,7 +65,7 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.18.2-rc.1</string>
+	<string>1.18.2</string>
 	<key>CFBundleSignature</key>
 	<string>toxq</string>
 	<key>CFBundleURLTypes</key>
@@ -84,7 +84,7 @@
 		</dict>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>1.18.2-rc.1</string>
+	<string>1.18.2</string>
 	<key>NSPrincipalClass</key>
 	<string>NSApplication</string>
 	<key>NSCameraUsageDescription</key>

diff --git a/res/io.github.qtox.qTox.appdata.xml b/res/io.github.qtox.qTox.appdata.xml
@@ -71,6 +71,6 @@
     <content_attribute id="social-audio">intense</content_attribute>
   </content_rating>
  <releases>
-  <release version="1.18.2-rc.1" date="2025-01-12"/>
+  <release version="1.18.2" date="2025-01-13"/>
  </releases>
 </component>
diff --git a/windows/qtox.nsi b/windows/qtox.nsi
@@ -276,7 +276,7 @@ Section "Install"
   ${WriteRegStr} "${REG_ROOT}" "${REG_APP_PATH}" "" "$INSTDIR\${MAIN_APP_EXE}"
   ${WriteRegStr} "${REG_ROOT}" "${REG_APP_PATH}" "Path" "$INSTDIR\bin\"
   ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "DisplayName" "qTox"
-  ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "DisplayVersion" "1.18.2-rc.1"
+  ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "DisplayVersion" "1.18.2"
   ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "Publisher" "The qTox Project"
   ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "UninstallString" "$INSTDIR\uninstall.exe"
   ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "URLInfoAbout" "https://qtox.github.io"

diff --git a/windows/qtox64.nsi b/windows/qtox64.nsi
@@ -277,7 +277,7 @@ Section "Install"
   ${WriteRegStr} "${REG_ROOT}" "${REG_APP_PATH}" "" "$INSTDIR\${MAIN_APP_EXE}"
   ${WriteRegStr} "${REG_ROOT}" "${REG_APP_PATH}" "Path" "$INSTDIR\bin\"
   ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "DisplayName" "qTox"
-  ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "DisplayVersion" "1.18.2-rc.1"
+  ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "DisplayVersion" "1.18.2"
   ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "Publisher" "The qTox Project"
   ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "UninstallString" "$INSTDIR\uninstall.exe"
   ${WriteRegStr} ${REG_ROOT} "${UNINSTALL_PATH}" "URLInfoAbout" "https://qtox.github.io"