Skip to content

v2.18.7-beta

Pre-release
Pre-release

Choose a tag to compare

View all tags
@caaatto caaatto released this 06 Apr 17:41
· 111 commits to main since this release
v2.18.7-beta
e81e49c

Security audit round 12, deferred OTP consumption, audio settings

Security:

  • Deferred OTP consumption: one-time pre-keys only consumed on message delivery, not on bundle fetch. Prevents OTP exhaustion attacks.
  • X3DH low-order point validation, HKDF intermediate zeroing
  • Group call pseudonym cross-session unlinkability
  • PlaceService.CreateChannel permission check
  • Wrong-conversation message display fix
  • WebView JSON encoder hardened

Audio:

  • Discord-style audio settings: auto input sensitivity, AGC, echo cancellation
  • Live input level meter (dB scale)
  • RNNoise bundled for Linux and Windows
Assets 7
Loading