From fe3cf0b5c05bc65be28631756bbba3133df7cdec Mon Sep 17 00:00:00 2001 From: Erik Hortsch Date: Thu, 22 Oct 2026 22:57:32 +0000 Subject: [PATCH] Update libwebrtc to 150.7871.04 150.7871.04 drops the AAA Certificate Services root from libwebrtc's compiled-in TURN/TLS trust anchors (rtc_base/ssl_roots.h), so certificates issued by the compromised eMudhra intermediates that are cross-signed by it are rejected. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01BsJ5Refi6x7GqXMqH4gJ4i --- .changeset/webrtc-150-7871-04-emudhra-roots.md | 7 +++++++ gradle/libs.versions.toml | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) create mode 100644 .changeset/webrtc-150-7871-04-emudhra-roots.md diff --git a/.changeset/webrtc-150-7871-04-emudhra-roots.md b/.changeset/webrtc-150-7871-04-emudhra-roots.md new file mode 100644 index 000000000..565632df5 --- /dev/null +++ b/.changeset/webrtc-150-7871-04-emudhra-roots.md @@ -0,0 +1,7 @@ +--- +"client-sdk-android": patch +--- + +Update libwebrtc to 150.7871.04, which removes the AAA Certificate Services root from the TURN/TLS trust anchors so certificates from the compromised eMudhra intermediates are rejected. + +This version also passes the TLS hostname to the Android platform certificate verifier, so the fallback to the OS trust store no longer fails when the app's `network_security_config` has a `domain-config`. diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index a5a951987..ee0cb1436 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -1,5 +1,5 @@ [versions] -webrtc = "150.7871.01" +webrtc = "150.7871.04" androidJainSipRi = "1.3.0-91" androidx-activity = "1.9.0"