search

tigase / stork

(M) Android XMPP Client
https://tigase.net/
GNU Affero General Public License v3.0
58 stars 16 forks source link

Using a newer webrtc lib #41

Closed licaon-kter closed 5 months ago

licaon-kter commented 2 years ago

For the F-Droid build Conversations and some of its fork switched to using the newer builds eg. 'ch.threema:webrtc-android:100.0.0' provided by Threema for their own Android app.

The issue is that their build is patched for their needs: https://github.com/threema-ch/webrtc-build-docker/tree/master/patches

And some Conversations forks (Cheogram, Snikket and Conversations from Play Store) can't use that since the patches break calls with https://jmp.chat users.

Is Stork affected by those patches? Can the Threema build be used?

The current lib provided by Google in maven, that Stork uses, is already >2years old and many CVEs have been fixed, eg. https://gitlab.com/fdroid/fdroiddata/-/merge_requests/11496#note_1047414675

licaon-kter commented 1 year ago

Or https://search.maven.org/artifact/im.conversations.webrtc/webrtc-android/104.0.0/aar like Conversations/Quicksy?

licaon-kter commented 5 months ago

https://www.openwall.com/lists/oss-security/2023/09/28/5

arthef commented 5 months ago

Thank you for heads up but we no longer develop or maintain stork app. We are working on a new app which is planed to be soon released and code published.

licaon-kter commented 5 months ago

fyi https://gitlab.com/fdroid/fdroiddata/-/commit/6293917baa8ead01743363c2113f7c408c361560