Skip to content

chore: Update electron-builder v26.0.3#3047

Merged
jeanfbrito merged 2 commits intomasterfrom
core-1069
Jun 28, 2025
Merged

chore: Update electron-builder v26.0.3#3047
jeanfbrito merged 2 commits intomasterfrom
core-1069

Conversation

@jeanfbrito
Copy link
Copy Markdown
Member

@jeanfbrito jeanfbrito commented Jun 28, 2025

🔐 Security Enhancement: Electron-Builder v26.0.3 + ASAR Integrity Protection

Upgrades electron-builder to v26.0.3 and implements ASAR integrity validation to prevent malicious app.asar replacement attacks (e.g., Loki C2, MITRE ATT&CK T1218.015).

Security Improvements

  • EnableEmbeddedAsarIntegrityValidation: true (blocks malicious ASAR files)
  • OnlyLoadAppFromAsar: true (prevents external code injection)

🎯 Smart Implementation

  • Regular builds: Full ASAR integrity protection applied
  • Mac App Store builds: Fuses skipped for compatibility (App Store provides own validation)
  • Cross-platform: Proper executable paths for Windows (Rocket.Chat.exe), Linux (rocketchat-desktop), macOS (Rocket.Chat.app)

🛠️ Technical Changes

  • Updated electron-builder: 25.1.826.0.3
  • Added conditional afterPack hook for platform-specific fuse application
  • Removed deprecated parameters: publisherName, signDlls, StartupWMClass, MimeType
  • Updated GitHub Actions release workflow for MAS compatibility

Closes: CORE-1069 - Protects against documented Electron security vulnerabilities while maintaining all distribution channels.

https://rocketchat.atlassian.net/browse/CORE-1069

@jeanfbrito jeanfbrito merged commit fedb593 into master Jun 28, 2025
6 of 8 checks passed
@jeanfbrito jeanfbrito deleted the core-1069 branch June 28, 2025 03:32
sreeja2007 pushed a commit to sreeja2007/Rocket.Chat.Electron that referenced this pull request Mar 2, 2026
* updated electron-builder v26.0.3

* add flipFuses
Ram-sah19 pushed a commit to Ram-sah19/Rocket.Chat.Electron that referenced this pull request Mar 10, 2026
* updated electron-builder v26.0.3

* add flipFuses
Ram-sah19 pushed a commit to Ram-sah19/Rocket.Chat.Electron that referenced this pull request Mar 10, 2026
* updated electron-builder v26.0.3

* add flipFuses
Ram-sah19 pushed a commit to Ram-sah19/Rocket.Chat.Electron that referenced this pull request Mar 10, 2026
* updated electron-builder v26.0.3

* add flipFuses
Ram-sah19 pushed a commit to Ram-sah19/Rocket.Chat.Electron that referenced this pull request Mar 10, 2026
* updated electron-builder v26.0.3

* add flipFuses
Ram-sah19 pushed a commit to Ram-sah19/Rocket.Chat.Electron that referenced this pull request Mar 10, 2026
* updated electron-builder v26.0.3

* add flipFuses
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant