Skip to content

v0.9.7 — security hardening

Choose a tag to compare

View all tags
@xAlisher xAlisher released this 08 Aug 14:57
· 6 commits to main since this release
v0.9.7
deb90da

v0.9.7 — security hardening

🔒 Security

  • Hardened the native MLS core (group membership + offline contacts): a KeyPackage
    fetched for a device is now cryptographically bound to that device before it can
    join a group, and offline contact cards must carry a valid device signature over
    their key package before they're used. Closes a group-membership integrity gap.
    Coordinated with upstream libchat; details will follow in a security advisory.

🔁 Other

  • Native library bump (liblogoschat.so); provenance + SBOM updated to match.

Seamless update from 0.9.x — just refresh F-Droid. No re-add or restore needed.

Assets 3
Loading