|
| From: | Maksim |
| Subject: | Re: [Linphone-users] Release of Linphone Desktop 3.8.0 |
| Date: | Fri, 13 Mar 2015 21:21:48 +0100 |
| User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 |
Another issue is when configuring with --enable-dtls option I see: --enable-dtls Turn on dtls support - requires polarssl > 1.4 but there is no polarssl > 1.4 at all. latest version of PolarSSL is 1.3.9 wich CONTAINS vulnerability. https://tls.mbed.org/tech-updates/security-advisories/polarssl-security-advisory-2014-04 Developers make fix for this in old branch 1.2.x and in new mbedtls lib. I think Linphone needs to be compiling with mbedtls.
| [Prev in Thread] | Current Thread | [Next in Thread] |