Re: [Linphone-users] Release of Linphone Desktop 3.8.0

[Ghislain MARY]

Hi,

There is a polarssl (mbedtls) 1.4. See 
https://tls.mbed.org/tech-updates/releases/mbedtls-1.4-dtls-preview-released. 
You can get it from this page or from the linphone-1.4 branch of 
git://git.linphone.org/polarssl.git repository.
However, this is a preview release that is not officially supported.

Cheers,
Ghislain

Le 13/03/2015 21:21, Maksim a écrit :
> Another issue is when configuring with --enable-dtls option I see:
>    --enable-dtls           Turn on dtls support - requires polarssl > 1.4
> but there is no polarssl > 1.4 at all.
>
> latest version of PolarSSL is 1.3.9 wich CONTAINS vulnerability.
> https://tls.mbed.org/tech-updates/security-advisories/polarssl-security-advisory-2014-04
>
> Developers make fix for this in old branch 1.2.x and in new mbedtls lib.
>
> I think Linphone needs to be compiling with mbedtls.
>
> _______________________________________________
> Linphone-users mailing list
> address@hidden
> https://lists.nongnu.org/mailman/listinfo/linphone-users