Security fix for telegram/calls; no other changes since v0.164.0.
Security
- calls: validate DH parameters and key fingerprint (#1960, GHSA-q4j3-h7r7-mrjp).
telegram/callsdid not fully validate the Diffie-Hellman parameters received from the server or check the key fingerprint on the callee side. It now applies the group, value-range and fingerprint checks used by the official clients. Affects v0.151.0 and later; only applications usingtelegram/callsare affected.
Full Changelog: v0.164.0...v0.164.1