github gotd/td v0.164.1

one hour ago

Security fix for telegram/calls; no other changes since v0.164.0.

Security

  • calls: validate DH parameters and key fingerprint (#1960, GHSA-q4j3-h7r7-mrjp). telegram/calls did not fully validate the Diffie-Hellman parameters received from the server or check the key fingerprint on the callee side. It now applies the group, value-range and fingerprint checks used by the official clients. Affects v0.151.0 and later; only applications using telegram/calls are affected.

Full Changelog: v0.164.0...v0.164.1

Don't miss a new td release

NewReleases is sending notifications on new releases.