Which electron version is discord currently using?
In Chrome version 96.0.4664.93, I saw that a bug was solved in Webrtc. Since it is based on electron chrome, the problem was solved on the electron side, but the problem may still be on the discord side, I can't say for sure because I don't know which electron version you are using.
https://nvd.nist.gov/vuln/detail/CVE-2021-4079
https://github.com/advisories/GHSA-j7jm-xwrj-8m3c
-
After a quick search, electron v13.6.8 seems to be the oldest backported version including the fix. Hope discord uses a modern electron version to circumvent these kind of security issues.
https://github.com/electron/electron/releases?q=CVE-2021-4079&expanded=true
2 -
I would love to see discord update Electron to a more modern version. That might help solve a hand full of other cross-platform compatibility and stability issues in addition to addressing vulnerability.
Current versions taken from the client User-Agent as of the latest deb package update, which was today:
discord/0.0.24
Chrome/91.0.4472.164
Electron/13.6.60
Iniciar sesión para dejar un comentario.
Comentarios
2 comentarios