Repository navigation
Security patch release on top of 2.13.1.
What's Changed
- Security: Bump flutter_webrtc to 1.6.3 and WebRTC-SDK to 150.7871.04. The bundled TURN/TLS roots no longer include AAA Certificate Services, which cross-signs the compromised eMudhra intermediate CAs (CVE-2026-111943)
On Windows and Linux, flutter_webrtc 1.6.3 uses libwebrtc m150.7871.07, which has the same root list change.
Signaling uses the operating system's trust store, so it is not affected by this change.
Full Changelog: v2.13.1...v2.13.2