6/12/2023 0 Comments Slack desktop app windows![]() The collaboration software company announced the desktop availability of an optional dark mode feature on Thursday, September 12, via a tweet and a blog post. Hundreds of software applications built using the developer framework called Electron may be vulnerable to a remote code execution flaw, according to developers of the framework. Slack desktop app users can finally use the workplace chat app with the popular visual theme, dark mode. Impacted are dozens of popular Windows applications such as Microsoft’s Skype for Windows and Slack.Įarlier this week, GitHub’s Electron team released two patched versions of the Electron framework (1.8.2-beta.4, 1.7.11, and 1.6.16) and also announced a workaround fix for the vulnerability ( CVE-2018-1000006). Meanwhile, publishers of affected applications, such as Skype for Windows and Slack, say they have also released updates to address the vulnerability.Įlectron is a node.js, V8, and Chromium open-source framework popular with developers interested in using web technologies such as JavaScript, HTML and CSS to build desktop apps. The framework, formerly known as Atom Shell, is currently being developed by GitHub.Įlectron said that “apps designed to run on Windows that that register themselves as the default handler for a protocol, like myapp://, are vulnerable,” according to a statement posted to GitHub’s Electron website. Plex is similar to Amazon Prime Video in that it has a perfectly good web browser player that gives you easy access to your movies, TV shows, music, photos, and more. using native code, the Windows registry, or Electron’s app.setAsDefaultProtocolClient API.” “Such apps can be affected regardless of how the protocol is registered, e.g. The Electron website lists over 400 applications built using the framework. If you’re still having issues, try and update the app as you normally would (for example, using the Mac App Store or Windows Store). If you’re having trouble getting the app to work, kill it entirely and start it up again. However, it’s unclear how many of those use the default Electron protocol handler which defines whether apps are vulnerable to the flaw. Open Whisper Systems, which also uses the Electron framework, confirmed to Threatpost its Signal secure messaging client is not impacted. The Slack desktop app is the most convenient and fastest way of using Slack.
0 Comments
Leave a Reply. |