Telegram-FOSS, NekoX: fix libwebp CVE

2026-07-19 20:34:05 +00:00 · 2023-09-28 13:45:45 +08:00 · 2023-09-28 13:45:45 +08:00 · 3c0608437c
commit 3c0608437c
parent f0553201c9
2 changed files with 484 additions and 2 deletions
--- a/metadata/nekox.messenger.yml
+++ b/metadata/nekox.messenger.yml
@ -37,6 +37,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.5.0-rc10
    versionCode: 227
@ -57,6 +60,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.6.0-rc02
    versionCode: 241
@ -77,6 +83,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.6.0-rc02
    versionCode: 242
@ -97,6 +106,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.6.0
    versionCode: 256
@ -117,6 +129,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.6.0
    versionCode: 257
@ -137,6 +152,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.6.0-2
    versionCode: 262
@ -157,6 +175,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.6.0-2
    versionCode: 263
@ -177,6 +198,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2-armeabi-v7a
    versionCode: 298
@ -197,6 +221,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2-arm64-v8a
    versionCode: 299
@ -217,6 +244,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2-1-armeabi-v7a
    versionCode: 301
@ -237,6 +267,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2-1-arm64-v8a
    versionCode: 302
@ -257,6 +290,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2-2-armeabi-v7a
    versionCode: 304
@ -277,6 +313,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2-2-arm64-v8a
    versionCode: 305
@ -297,6 +336,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2-3-arm
    versionCode: 309
@ -317,6 +359,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2-3-arm64
    versionCode: 310
@ -337,6 +382,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.8.0-1-arm
    versionCode: 339
@ -357,6 +405,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.8.0-1-arm64
    versionCode: 340
@ -377,6 +428,9 @@ Builds:
      - pushd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.1.1-arm
    versionCode: 419
@ -418,6 +472,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.1.1-arm64
    versionCode: 420
@ -459,6 +516,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.3-1-arm
    versionCode: 440
@ -500,6 +560,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.3-1-arm64
    versionCode: 441
@ -541,6 +604,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.7-rc03-arm
    versionCode: 459
@ -582,6 +648,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.7-rc03-arm64
    versionCode: 460
@ -623,6 +692,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.7-arm
    versionCode: 469
@ -655,6 +727,9 @@ Builds:
      - sed -i -e 's/def disableCMakeRelWithDebInfo = System.getenv("COMPILE_NATIVE")
        == null/def disableCMakeRelWithDebInfo = false/' TMessagesProj/build.gradle
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.7-arm64
    versionCode: 470
@ -687,6 +762,9 @@ Builds:
      - sed -i -e 's/def disableCMakeRelWithDebInfo = System.getenv("COMPILE_NATIVE")
        == null/def disableCMakeRelWithDebInfo = false/' TMessagesProj/build.gradle
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.7-rc06-arm
    versionCode: 489
@ -719,6 +797,9 @@ Builds:
      - sed -i -e 's/def disableCMakeRelWithDebInfo = System.getenv("COMPILE_NATIVE")
        == null/def disableCMakeRelWithDebInfo = false/' TMessagesProj/build.gradle
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.7-rc06-arm64
    versionCode: 490
@ -751,6 +832,9 @@ Builds:
      - sed -i -e 's/def disableCMakeRelWithDebInfo = System.getenv("COMPILE_NATIVE")
        == null/def disableCMakeRelWithDebInfo = false/' TMessagesProj/build.gradle
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.3.0-preview01
    versionCode: 500
@ -781,6 +865,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.3.1
    versionCode: 510
@ -810,6 +897,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.2-preview01
    versionCode: 520
@ -839,6 +929,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.3-rc01
    versionCode: 535
@ -868,6 +961,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.4-rc01
    versionCode: 545
@ -897,6 +993,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.4-rc02
    versionCode: 550
@ -926,6 +1025,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.1-preview01
    versionCode: 560
@ -955,6 +1057,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.1
    versionCode: 570
@ -984,6 +1089,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.4-rc01
    versionCode: 580
@ -1013,6 +1121,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.4
    versionCode: 581
@ -1042,6 +1153,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.6.1-preview02
    versionCode: 601
@ -1071,6 +1185,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.6.2-rc01
    versionCode: 610
@ -1100,6 +1217,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.7.4
    versionCode: 635
@ -1129,6 +1249,9 @@ Builds:
      - git rev-parse HEAD
      - git gc --prune=now
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 9.1.6
    versionCode: 680
@ -1154,6 +1277,9 @@ Builds:
      - cd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 9.3.3
    versionCode: 710
@ -1179,9 +1305,42 @@ Builds:
      - cd ..
      - ./run fdroid build
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
+
+  - versionName: 9.3.3
+    versionCode: 711
+    commit: 6d0964f9950e3fb9f898bccbd9e0c3f261a53938
+    timeout: 10800
+    subdir: TMessagesProj
+    submodules: true
+    sudo:
+      - apt-get update
+      - apt-get install -y ninja-build yasm cmake libuv1 make
+    gradle:
+      - miniFdroid
+    output: build/outputs/apk/mini/*/*.apk
+    rm:
+      - TMessagesProj_*
+    prebuild:
+      - sed -i -e '/firebase/d' -e '/gms/d' {..,.}/build.gradle
+      - sed -i -e 's/def verCode = 710/def verCode = 711/' build.gradle
+      - echo -e "\norg.gradle.jvmargs=-Xms1024m -Xmx4096m -XX:MaxPermSize=4096m" >>
+        ../gradle.properties
+      - cd ..
+      - ./run fdroid prebuild
+      - $HOME/.go/bin/go install golang.org/x/mobile/cmd/gomobile@v0.0.0-20210220033013-bdb1ca9a1e08
+      - cd TMessagesProj/jni/libwebp
+      - git fetch
+      - git checkout 20ceff7eb3ccb679bd299f3d481309e10cbf2616
+    build:
+      - cd ..
+      - ./run fdroid build
+    ndk: r21e

 AutoUpdateMode: Version
 UpdateCheckMode: Tags ^v[0-9.]+$
 UpdateCheckData: TMessagesProj/build.gradle|verCode\s=\s(\d+)|.|verName\s=\s"(.+)"
 CurrentVersion: 9.3.3
-CurrentVersionCode: 710
+CurrentVersionCode: 711
--- a/metadata/org.telegram.messenger.yml
+++ b/metadata/org.telegram.messenger.yml
@ -419,6 +419,9 @@ Builds:
      - ./build_ffmpeg_android.sh
      - popd
    ndk: r15c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 4.2.1b
    versionCode: 10455
@ -438,6 +441,9 @@ Builds:
      - ./build_ffmpeg_android.sh
      - popd
    ndk: r15c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 4.6.0
    versionCode: 11555
@ -457,6 +463,9 @@ Builds:
      - ./build_ffmpeg_android.sh
      - popd
    ndk: r15c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 4.6.0a
    versionCode: 11565
@ -476,6 +485,9 @@ Builds:
      - ./build_ffmpeg_android.sh
      - popd
    ndk: r14b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 4.6.0b
    versionCode: 11575
@ -495,6 +507,9 @@ Builds:
      - ./build_ffmpeg_android.sh
      - popd
    ndk: r14b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 4.6.0c
    versionCode: 11585
@ -514,6 +529,9 @@ Builds:
      - ./build_ffmpeg_android.sh
      - popd
    ndk: r14b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 4.9.0
    versionCode: 13400
@ -541,6 +559,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 4.9.1
    versionCode: 13580
@ -568,6 +589,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 4.9.1a
    versionCode: 13590
@ -596,6 +620,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.2.1
    versionCode: 14780
@ -623,6 +650,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.3.1
    versionCode: 14970
@ -650,6 +680,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.4.0
    versionCode: 15170
@ -677,6 +710,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.6.1
    versionCode: 15910
@ -705,6 +741,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.7.1
    versionCode: 16080
@ -733,6 +772,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.9.0
    versionCode: 16480
@ -761,6 +803,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.9.0
    versionCode: 16483
@ -789,6 +834,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.9.0
    versionCode: 16484
@ -817,6 +865,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.9.0
    versionCode: 16487
@ -845,6 +896,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.10.0
    versionCode: 16840
@ -873,6 +927,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.10.0
    versionCode: 16841
@ -901,6 +958,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.10.0
    versionCode: 16842
@ -929,6 +989,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.10.0
    versionCode: 16845
@ -957,6 +1020,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.11.0
    versionCode: 17100
@ -985,6 +1051,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.11.0
    versionCode: 17101
@ -1013,6 +1082,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.11.0
    versionCode: 17102
@ -1041,6 +1113,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.11.0
    versionCode: 17105
@ -1069,6 +1144,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.13.1
    versionCode: 18290
@ -1097,6 +1175,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.13.1
    versionCode: 18291
@ -1125,6 +1206,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.13.1
    versionCode: 18292
@ -1153,6 +1237,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.13.1
    versionCode: 18295
@ -1181,6 +1268,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.14.0
    versionCode: 18511
@ -1209,6 +1299,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.14.0
    versionCode: 18515
@ -1237,6 +1330,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.14.0
    versionCode: 18519
@ -1265,6 +1361,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.15.0
    versionCode: 18691
@ -1293,6 +1392,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 5.15.0
    versionCode: 18699
@ -1321,6 +1423,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 6.0.1
    versionCode: 19111
@ -1351,6 +1456,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 6.0.1
    versionCode: 19119
@ -1381,6 +1489,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 6.1.1
    versionCode: 19471
@ -1411,6 +1522,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 6.1.1
    versionCode: 19479
@ -1441,6 +1555,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 6.2.0
    versionCode: 19881
@ -1472,6 +1589,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 6.2.0
    versionCode: 19889
@ -1502,6 +1622,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 6.3.0
    versionCode: 20421
@ -1533,6 +1656,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 6.3.0
    versionCode: 20429
@ -1564,6 +1690,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.0.1
    versionCode: 20651
@ -1593,6 +1722,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.0.1
    versionCode: 20655
@ -1622,6 +1754,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.1.3
    versionCode: 21031
@ -1650,6 +1785,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.1.3
    versionCode: 21035
@ -1678,6 +1816,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.2.1
    versionCode: 21391
@ -1706,6 +1847,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.2.1
    versionCode: 21395
@ -1734,6 +1878,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.3.1
    versionCode: 22061
@ -1762,6 +1909,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.3.1
    versionCode: 22065
@ -1790,6 +1940,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.4.2
    versionCode: 22271
@ -1818,6 +1971,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.4.2
    versionCode: 22275
@ -1846,6 +2002,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.5.0
    versionCode: 22461
@ -1874,6 +2033,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.5.0
    versionCode: 22465
@ -1902,6 +2064,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.6.0
    versionCode: 22641
@ -1930,6 +2095,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.6.0
    versionCode: 22645
@ -1958,6 +2126,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2
    versionCode: 22931
@ -1986,6 +2157,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.7.2
    versionCode: 22935
@ -2014,6 +2188,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.8.0
    versionCode: 23601
@ -2041,6 +2218,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 7.8.0
    versionCode: 23605
@ -2068,6 +2248,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.0.0
    versionCode: 24061
@ -2096,6 +2279,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.0.0
    versionCode: 24065
@ -2124,6 +2310,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.1.2
    versionCode: 24321
@ -2152,6 +2341,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.1.2
    versionCode: 24325
@ -2180,6 +2372,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.7
    versionCode: 24701
@ -2208,6 +2403,9 @@ Builds:
      - ./build_boringssl.sh arm arm64
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.2.7
    versionCode: 24705
@ -2236,6 +2434,9 @@ Builds:
      - ./build_boringssl.sh arm arm64
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.2
    versionCode: 25261
@ -2265,6 +2466,9 @@ Builds:
      - ./build_libvpx_clang.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.2
    versionCode: 25269
@ -2294,6 +2498,9 @@ Builds:
      - ./build_libvpx_clang.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.4
    versionCode: 25381
@ -2323,6 +2530,9 @@ Builds:
      - ./build_libvpx_clang.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.4
    versionCode: 25385
@ -2352,6 +2562,9 @@ Builds:
      - ./build_libvpx_clang.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.4.4
    versionCode: 25389
@ -2381,6 +2594,9 @@ Builds:
      - ./build_libvpx_clang.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.2
    versionCode: 25631
@ -2410,6 +2626,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.2
    versionCode: 25635
@ -2439,6 +2658,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.2
    versionCode: 25639
@ -2468,6 +2690,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.4
    versionCode: 25661
@ -2497,6 +2722,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.4
    versionCode: 25662
@ -2526,6 +2754,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.4
    versionCode: 25665
@ -2555,6 +2786,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.5.4
    versionCode: 25666
@ -2584,6 +2818,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.6.2
    versionCode: 26001
@ -2613,6 +2850,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.6.2
    versionCode: 26002
@ -2642,6 +2882,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.6.2
    versionCode: 26005
@ -2671,6 +2914,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.6.2
    versionCode: 26006
@ -2700,6 +2946,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.7.4
    versionCode: 26361
@ -2729,6 +2978,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.7.4
    versionCode: 26362
@ -2758,6 +3010,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.7.4
    versionCode: 26365
@ -2787,6 +3042,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.7.4
    versionCode: 26366
@ -2816,6 +3074,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.8.5
    versionCode: 27219
@ -2845,6 +3106,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.9.2
    versionCode: 27569
@ -2876,6 +3140,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 8.9.2a
    versionCode: 27579
@ -2907,6 +3174,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 9.0.2
    versionCode: 28089
@ -2935,6 +3205,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 9.2.2
    versionCode: 29659
@ -2963,6 +3236,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 9.3.3
    versionCode: 30269
@ -2991,6 +3267,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 9.5.3
    versionCode: 32139
@ -3019,6 +3298,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 9.6.5
    versionCode: 33569
@ -3047,6 +3329,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 9.7.6
    versionCode: 37219
@ -3075,6 +3360,9 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)

  - versionName: 10.0.9
    versionCode: 38729
@ -3103,6 +3391,41 @@ Builds:
      - ./build_boringssl.sh
      - popd
    ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
+
+  - versionName: 10.0.9
+    versionCode: 38730
+    commit: v10.0.9
+    subdir: TMessagesProj_App
+    submodules: true
+    sudo:
+      - apt-get update
+      - apt-get install -y ninja-build golang-go yasm cmake libuv1 make
+    gradle:
+      - afat
+    rm:
+      - TMessagesProj/jni/ffmpeg/tests/ref/fate/sub-microdvd-remux
+    prebuild:
+      - echo -e 'APP_ID = 105811\nAPP_HASH = 3e7a52498eec003c5896a330e5d29397' > API_KEYS
+      - sed -i -e 's/abiVersionCode = 9/abiVersionCode = 10/' build.gradle
+      - cd ../TMessagesProj/jni/libwebp
+      - git fetch
+      - git checkout 20ceff7eb3ccb679bd299f3d481309e10cbf2616
+    scandelete:
+      - TMessagesProj/jni
+    build:
+      - export NDK=$$NDK$$
+      - export NINJA_PATH=/usr/bin/ninja
+      - pushd ../TMessagesProj/jni
+      - ./build_libvpx_clang.sh
+      - ./build_ffmpeg_clang.sh
+      - ./patch_ffmpeg.sh
+      - ./patch_boringssl.sh
+      - ./build_boringssl.sh
+      - popd
+    ndk: r21e

 MaintainerNotes: Update check mode not working because of version code calculations
  for different flavours.
@ -3111,4 +3434,4 @@ ArchivePolicy: 3
 AutoUpdateMode: None
 UpdateCheckMode: None
 CurrentVersion: 10.0.9
-CurrentVersionCode: 38729
+CurrentVersionCode: 38730