search

Unity-Technologies / com.unity.webrtc

WebRTC package for Unity
Other
753 stars 191 forks source link

[REQUEST]: Update WebRTC source to address vulnerabilities on Android. #830

Closed Lintzmaia closed 1 year ago

Lintzmaia commented 1 year ago

Package version

2.4.0-exp.10

Environment

OS: Windows 10
Unity version: Unity 2019.4

Steps To Reproduce

  1. Build application with WebRTC version 2.4.0-exp10.
  2. Publish to Google Play.

Current Behavior

Google has given us a error saying that WebRTC has vulnerabilities when pushing a new version to Google Play. image

They provide us a link on how to fix this: https://support.google.com/faqs/answer/12577537 I believe the relevant section on this page is this: It is strongly recommended that apps update to the current source, though updating to M102 or later will remediate the security issue.

I believe the vulnerability will only be exposed once the connection is made between 2 peers, so if I'm worng about this, please correct me since we chose to keep this version available on Google Play for now.

Is it possible for the next version to come with the latest version of WebRTC? Or is there something I can do to remediate this on my end?

Expected Behavior

No response

Anything else?

No response

karasusan commented 1 year ago

@Lintzmaia Yes, we have a plan to update the webrtc version for the next release. The release would be in January.

Lintzmaia commented 1 year ago

Ok. Thank you!

karasusan commented 1 year ago

memo: WRS-97

karasusan commented 1 year ago

Fixed. https://github.com/Unity-Technologies/com.unity.webrtc/pull/843

karasusan commented 1 year ago

@Lintzmaia This issue is fixed. Please try the latest version 3.0.0-pre.2.