search

meshenger-app / meshenger-android

P2P Voice/Video phone App for local networks.
GNU General Public License v3.0
698 stars 108 forks source link

CVE-2023-5217 - update webrtc lib to 118 or later #140

Closed licaon-kter closed 4 months ago

licaon-kter commented 5 months ago

ref: https://github.com/meshenger-app/meshenger-android/blob/v4.2.8/app/build.gradle#L49

eg. https://codeberg.org/iNPUTmice/webrtc-android

mwarning commented 4 months ago

fixed in 4.3.0

linsui commented 4 months ago

https://gitlab.com/fdroid/fdroiddata/-/jobs/7361706569

mwarning commented 4 months ago

@linsui thank you for the heads up. Meshenger 4.3.1 needs WebRTC with a specific patch to fix a bug: https://github.com/meshenger-app/meshenger-android/blob/master/webrtc/detect-tethered-networks-on-android.patch

What is the proper way to have a patched WebRTC for this App in F-Droid?

linsui commented 4 months ago

There is no proper way. :shrug: See https://gitlab.com/fdroid/fdroiddata/-/issues/2064. Maybe @licaon-kter has some idea.

mwarning commented 4 months ago

Thank you for the quick answer!

licaon-kter commented 3 months ago

@mwarning does im.conversations webrtc work as expected?

mwarning commented 3 months ago

@licaon-kter yes, it seems to work with the im.conversations webrtc build.