Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

the shipped libtoxcore.so is way out of date #15

Open
Green-Sky opened this issue Oct 12, 2022 · 1 comment · May be fixed by #18
Open

the shipped libtoxcore.so is way out of date #15

Green-Sky opened this issue Oct 12, 2022 · 1 comment · May be fixed by #18

Comments

@Green-Sky
Copy link

commit says Feb 26, 2020
which was shortly before v0.2.11
everything below v0.2.13 is affected by a cve
we are at v0.2.18 since earlier this year (2022)

@plantroon
Copy link

plantroon commented Feb 6, 2023

@Green-Sky https://github.com/plantroon/mx-puppet-tox I forked this and built an updated version (as the one in this repo won't build anymore). I only took this project, adjusted what was needed for it to build, created a frankendebian docker image with the newest toxcore and published it. I updated the README as well. It builds and it works for me, I have like 2 friends on Tox but even they are considering leaving that platform for Signal or Matrix itself. Heck we basically don't even use it to be honest, it was just an experiment. So in the experimental sense it continues.

I'll create a PR but I really did not look at or understood the code, so I don't know if I didn't break things (probably not). Updating all the deps seems like a bigger endavour since I don't really know JS.

It is available on ghcr as well: ghcr.io/plantroon/mx-puppet-tox:master

If you are going to use it, you can let me know if you encounter any bugs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants