Electron: v9.4.0 Release

Release date:
December 11, 2020
Previous version:
v9.3.5 (released November 23, 2020)
Magnitude:
47 Diff Delta
Contributors:
7 total committers
Data confidence:
Commits:

Top Contributors in v9.4.0

trop[bot]
ppontes
electron-bot
deepak1556
codebytere
miniak
nornagon

Directory Browser for v9.4.0

We haven't yet finished calculating and confirming the files and directories changed in this release. Please check back soon.

Release Notes Published

Release Notes for v9.4.0

Fixes

  • Added Electron DLLs like libGLESv2.dll to symbol server. #26967 <span style="font-size:small;">(Also in 10, 11, 12)</span>
  • Fixed systemPreferences.effectiveAppearance returning systemPreferences.getAppLevelAppearance(). #26881 <span style="font-size:small;">(Also in 10, 11, 12)</span>
  • Fixed an issue where event.reply could sometimes not deliver a reply to an IPC message when cross-site iframes were present. #26928 <span style="font-size:small;">(Also in 10, 11, 12)</span>
  • Fixed an issue where some buttons were un-clickable in some BrowserViews with draggable regions enabled. #26745 <span style="font-size:small;">(Also in 10, 11)</span>
  • Fixed an issue whereby a corrupted async_hooks stack would crash the renderer when throwing some errors in the renderer process. #26748 <span style="font-size:small;">(Also in 10, 11)</span>
  • Fixed an occasional crash on Windows related to NativeViewHost::SetParentAccessible. #26950 <span style="font-size:small;">(Also in 10, 11, 12)</span>
  • Fixed usage of --disable-dev-shm-usage for apps using --no-sandbox on linux. #26806

    Other Changes

  • Backported the fix to CVE-2020-16024: Heap buffer overflow in UI. #26831

  • Security: backport fix for 1150649. #26897

  • Security: backported fix for 1137603. #26893

  • Security: backported fix for 1141350. #26895

  • Security: backported the fix to CVE-2020-16014: Use after free in PPAPI. #26856

  • Security: backported the fix to CVE-2020-16015: Insufficient data validation in WASM. #26859

  • Security: backported the fix to CVE-2020-16022: Insufficient policy enforcement in networking. #26861