From 3c0608437c402e2ec322dd92c4f8bfe7daf7e0cf Mon Sep 17 00:00:00 2001
From: linsui <linsui555@gmail.com>
Date: Thu, 28 Sep 2023 13:45:45 +0800
Subject: [PATCH] Telegram-FOSS, NekoX: fix libwebp CVE

---
 metadata/nekox.messenger.yml        | 161 +++++++++++++-
 metadata/org.telegram.messenger.yml | 325 +++++++++++++++++++++++++++-
 2 files changed, 484 insertions(+), 2 deletions(-)

diff --git a/metadata/nekox.messenger.yml b/metadata/nekox.messenger.yml
index 6a27fc5a3c..6fdeb62f1c 100644
--- a/metadata/nekox.messenger.yml
+++ b/metadata/nekox.messenger.yml
@@ -37,6 +37,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.5.0-rc10
     versionCode: 227
@@ -57,6 +60,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.6.0-rc02
     versionCode: 241
@@ -77,6 +83,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.6.0-rc02
     versionCode: 242
@@ -97,6 +106,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.6.0
     versionCode: 256
@@ -117,6 +129,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.6.0
     versionCode: 257
@@ -137,6 +152,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.6.0-2
     versionCode: 262
@@ -157,6 +175,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.6.0-2
     versionCode: 263
@@ -177,6 +198,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2-armeabi-v7a
     versionCode: 298
@@ -197,6 +221,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2-arm64-v8a
     versionCode: 299
@@ -217,6 +244,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2-1-armeabi-v7a
     versionCode: 301
@@ -237,6 +267,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2-1-arm64-v8a
     versionCode: 302
@@ -257,6 +290,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2-2-armeabi-v7a
     versionCode: 304
@@ -277,6 +313,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2-2-arm64-v8a
     versionCode: 305
@@ -297,6 +336,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2-3-arm
     versionCode: 309
@@ -317,6 +359,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2-3-arm64
     versionCode: 310
@@ -337,6 +382,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.8.0-1-arm
     versionCode: 339
@@ -357,6 +405,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.8.0-1-arm64
     versionCode: 340
@@ -377,6 +428,9 @@ Builds:
       - pushd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.1.1-arm
     versionCode: 419
@@ -418,6 +472,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.1.1-arm64
     versionCode: 420
@@ -459,6 +516,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.3-1-arm
     versionCode: 440
@@ -500,6 +560,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.3-1-arm64
     versionCode: 441
@@ -541,6 +604,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.7-rc03-arm
     versionCode: 459
@@ -582,6 +648,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.7-rc03-arm64
     versionCode: 460
@@ -623,6 +692,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.7-arm
     versionCode: 469
@@ -655,6 +727,9 @@ Builds:
       - sed -i -e 's/def disableCMakeRelWithDebInfo = System.getenv("COMPILE_NATIVE")
         == null/def disableCMakeRelWithDebInfo = false/' TMessagesProj/build.gradle
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.7-arm64
     versionCode: 470
@@ -687,6 +762,9 @@ Builds:
       - sed -i -e 's/def disableCMakeRelWithDebInfo = System.getenv("COMPILE_NATIVE")
         == null/def disableCMakeRelWithDebInfo = false/' TMessagesProj/build.gradle
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.7-rc06-arm
     versionCode: 489
@@ -719,6 +797,9 @@ Builds:
       - sed -i -e 's/def disableCMakeRelWithDebInfo = System.getenv("COMPILE_NATIVE")
         == null/def disableCMakeRelWithDebInfo = false/' TMessagesProj/build.gradle
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.7-rc06-arm64
     versionCode: 490
@@ -751,6 +832,9 @@ Builds:
       - sed -i -e 's/def disableCMakeRelWithDebInfo = System.getenv("COMPILE_NATIVE")
         == null/def disableCMakeRelWithDebInfo = false/' TMessagesProj/build.gradle
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.3.0-preview01
     versionCode: 500
@@ -781,6 +865,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.3.1
     versionCode: 510
@@ -810,6 +897,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.2-preview01
     versionCode: 520
@@ -839,6 +929,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.3-rc01
     versionCode: 535
@@ -868,6 +961,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.4-rc01
     versionCode: 545
@@ -897,6 +993,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.4-rc02
     versionCode: 550
@@ -926,6 +1025,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.1-preview01
     versionCode: 560
@@ -955,6 +1057,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.1
     versionCode: 570
@@ -984,6 +1089,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.4-rc01
     versionCode: 580
@@ -1013,6 +1121,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.4
     versionCode: 581
@@ -1042,6 +1153,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.6.1-preview02
     versionCode: 601
@@ -1071,6 +1185,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.6.2-rc01
     versionCode: 610
@@ -1100,6 +1217,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.7.4
     versionCode: 635
@@ -1129,6 +1249,9 @@ Builds:
       - git rev-parse HEAD
       - git gc --prune=now
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 9.1.6
     versionCode: 680
@@ -1154,6 +1277,9 @@ Builds:
       - cd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 9.3.3
     versionCode: 710
@@ -1179,9 +1305,42 @@ Builds:
       - cd ..
       - ./run fdroid build
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
+
+  - versionName: 9.3.3
+    versionCode: 711
+    commit: 6d0964f9950e3fb9f898bccbd9e0c3f261a53938
+    timeout: 10800
+    subdir: TMessagesProj
+    submodules: true
+    sudo:
+      - apt-get update
+      - apt-get install -y ninja-build yasm cmake libuv1 make
+    gradle:
+      - miniFdroid
+    output: build/outputs/apk/mini/*/*.apk
+    rm:
+      - TMessagesProj_*
+    prebuild:
+      - sed -i -e '/firebase/d' -e '/gms/d' {..,.}/build.gradle
+      - sed -i -e 's/def verCode = 710/def verCode = 711/' build.gradle
+      - echo -e "\norg.gradle.jvmargs=-Xms1024m -Xmx4096m -XX:MaxPermSize=4096m" >>
+        ../gradle.properties
+      - cd ..
+      - ./run fdroid prebuild
+      - $HOME/.go/bin/go install golang.org/x/mobile/cmd/gomobile@v0.0.0-20210220033013-bdb1ca9a1e08
+      - cd TMessagesProj/jni/libwebp
+      - git fetch
+      - git checkout 20ceff7eb3ccb679bd299f3d481309e10cbf2616
+    build:
+      - cd ..
+      - ./run fdroid build
+    ndk: r21e
 
 AutoUpdateMode: Version
 UpdateCheckMode: Tags ^v[0-9.]+$
 UpdateCheckData: TMessagesProj/build.gradle|verCode\s=\s(\d+)|.|verName\s=\s"(.+)"
 CurrentVersion: 9.3.3
-CurrentVersionCode: 710
+CurrentVersionCode: 711
diff --git a/metadata/org.telegram.messenger.yml b/metadata/org.telegram.messenger.yml
index 16ec970fce..d3ae422313 100644
--- a/metadata/org.telegram.messenger.yml
+++ b/metadata/org.telegram.messenger.yml
@@ -419,6 +419,9 @@ Builds:
       - ./build_ffmpeg_android.sh
       - popd
     ndk: r15c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 4.2.1b
     versionCode: 10455
@@ -438,6 +441,9 @@ Builds:
       - ./build_ffmpeg_android.sh
       - popd
     ndk: r15c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 4.6.0
     versionCode: 11555
@@ -457,6 +463,9 @@ Builds:
       - ./build_ffmpeg_android.sh
       - popd
     ndk: r15c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 4.6.0a
     versionCode: 11565
@@ -476,6 +485,9 @@ Builds:
       - ./build_ffmpeg_android.sh
       - popd
     ndk: r14b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 4.6.0b
     versionCode: 11575
@@ -495,6 +507,9 @@ Builds:
       - ./build_ffmpeg_android.sh
       - popd
     ndk: r14b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 4.6.0c
     versionCode: 11585
@@ -514,6 +529,9 @@ Builds:
       - ./build_ffmpeg_android.sh
       - popd
     ndk: r14b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 4.9.0
     versionCode: 13400
@@ -541,6 +559,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 4.9.1
     versionCode: 13580
@@ -568,6 +589,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 4.9.1a
     versionCode: 13590
@@ -596,6 +620,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.2.1
     versionCode: 14780
@@ -623,6 +650,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.3.1
     versionCode: 14970
@@ -650,6 +680,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r16b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.4.0
     versionCode: 15170
@@ -677,6 +710,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.6.1
     versionCode: 15910
@@ -705,6 +741,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.7.1
     versionCode: 16080
@@ -733,6 +772,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.9.0
     versionCode: 16480
@@ -761,6 +803,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.9.0
     versionCode: 16483
@@ -789,6 +834,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.9.0
     versionCode: 16484
@@ -817,6 +865,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.9.0
     versionCode: 16487
@@ -845,6 +896,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.10.0
     versionCode: 16840
@@ -873,6 +927,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.10.0
     versionCode: 16841
@@ -901,6 +958,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.10.0
     versionCode: 16842
@@ -929,6 +989,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.10.0
     versionCode: 16845
@@ -957,6 +1020,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.11.0
     versionCode: 17100
@@ -985,6 +1051,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.11.0
     versionCode: 17101
@@ -1013,6 +1082,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.11.0
     versionCode: 17102
@@ -1041,6 +1113,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.11.0
     versionCode: 17105
@@ -1069,6 +1144,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r19c
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.13.1
     versionCode: 18290
@@ -1097,6 +1175,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.13.1
     versionCode: 18291
@@ -1125,6 +1206,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.13.1
     versionCode: 18292
@@ -1153,6 +1237,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.13.1
     versionCode: 18295
@@ -1181,6 +1268,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.14.0
     versionCode: 18511
@@ -1209,6 +1299,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.14.0
     versionCode: 18515
@@ -1237,6 +1330,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.14.0
     versionCode: 18519
@@ -1265,6 +1361,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.15.0
     versionCode: 18691
@@ -1293,6 +1392,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 5.15.0
     versionCode: 18699
@@ -1321,6 +1423,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r20b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 6.0.1
     versionCode: 19111
@@ -1351,6 +1456,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 6.0.1
     versionCode: 19119
@@ -1381,6 +1489,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 6.1.1
     versionCode: 19471
@@ -1411,6 +1522,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 6.1.1
     versionCode: 19479
@@ -1441,6 +1555,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 6.2.0
     versionCode: 19881
@@ -1472,6 +1589,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 6.2.0
     versionCode: 19889
@@ -1502,6 +1622,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21b
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 6.3.0
     versionCode: 20421
@@ -1533,6 +1656,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 6.3.0
     versionCode: 20429
@@ -1564,6 +1690,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.0.1
     versionCode: 20651
@@ -1593,6 +1722,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.0.1
     versionCode: 20655
@@ -1622,6 +1754,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.1.3
     versionCode: 21031
@@ -1650,6 +1785,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.1.3
     versionCode: 21035
@@ -1678,6 +1816,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.2.1
     versionCode: 21391
@@ -1706,6 +1847,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.2.1
     versionCode: 21395
@@ -1734,6 +1878,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.3.1
     versionCode: 22061
@@ -1762,6 +1909,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.3.1
     versionCode: 22065
@@ -1790,6 +1940,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.4.2
     versionCode: 22271
@@ -1818,6 +1971,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.4.2
     versionCode: 22275
@@ -1846,6 +2002,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21d
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.5.0
     versionCode: 22461
@@ -1874,6 +2033,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.5.0
     versionCode: 22465
@@ -1902,6 +2064,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.6.0
     versionCode: 22641
@@ -1930,6 +2095,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.6.0
     versionCode: 22645
@@ -1958,6 +2126,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2
     versionCode: 22931
@@ -1986,6 +2157,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.7.2
     versionCode: 22935
@@ -2014,6 +2188,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.8.0
     versionCode: 23601
@@ -2041,6 +2218,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 7.8.0
     versionCode: 23605
@@ -2068,6 +2248,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.0.0
     versionCode: 24061
@@ -2096,6 +2279,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.0.0
     versionCode: 24065
@@ -2124,6 +2310,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.1.2
     versionCode: 24321
@@ -2152,6 +2341,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.1.2
     versionCode: 24325
@@ -2180,6 +2372,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.7
     versionCode: 24701
@@ -2208,6 +2403,9 @@ Builds:
       - ./build_boringssl.sh arm arm64
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.2.7
     versionCode: 24705
@@ -2236,6 +2434,9 @@ Builds:
       - ./build_boringssl.sh arm arm64
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.2
     versionCode: 25261
@@ -2265,6 +2466,9 @@ Builds:
       - ./build_libvpx_clang.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.2
     versionCode: 25269
@@ -2294,6 +2498,9 @@ Builds:
       - ./build_libvpx_clang.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.4
     versionCode: 25381
@@ -2323,6 +2530,9 @@ Builds:
       - ./build_libvpx_clang.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.4
     versionCode: 25385
@@ -2352,6 +2562,9 @@ Builds:
       - ./build_libvpx_clang.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.4.4
     versionCode: 25389
@@ -2381,6 +2594,9 @@ Builds:
       - ./build_libvpx_clang.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.2
     versionCode: 25631
@@ -2410,6 +2626,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.2
     versionCode: 25635
@@ -2439,6 +2658,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.2
     versionCode: 25639
@@ -2468,6 +2690,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.4
     versionCode: 25661
@@ -2497,6 +2722,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.4
     versionCode: 25662
@@ -2526,6 +2754,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.4
     versionCode: 25665
@@ -2555,6 +2786,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.5.4
     versionCode: 25666
@@ -2584,6 +2818,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.6.2
     versionCode: 26001
@@ -2613,6 +2850,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.6.2
     versionCode: 26002
@@ -2642,6 +2882,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.6.2
     versionCode: 26005
@@ -2671,6 +2914,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.6.2
     versionCode: 26006
@@ -2700,6 +2946,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.7.4
     versionCode: 26361
@@ -2729,6 +2978,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.7.4
     versionCode: 26362
@@ -2758,6 +3010,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.7.4
     versionCode: 26365
@@ -2787,6 +3042,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.7.4
     versionCode: 26366
@@ -2816,6 +3074,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.8.5
     versionCode: 27219
@@ -2845,6 +3106,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.9.2
     versionCode: 27569
@@ -2876,6 +3140,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 8.9.2a
     versionCode: 27579
@@ -2907,6 +3174,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 9.0.2
     versionCode: 28089
@@ -2935,6 +3205,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 9.2.2
     versionCode: 29659
@@ -2963,6 +3236,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 9.3.3
     versionCode: 30269
@@ -2991,6 +3267,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 9.5.3
     versionCode: 32139
@@ -3019,6 +3298,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 9.6.5
     versionCode: 33569
@@ -3047,6 +3329,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 9.7.6
     versionCode: 37219
@@ -3075,6 +3360,9 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
 
   - versionName: 10.0.9
     versionCode: 38729
@@ -3103,6 +3391,41 @@ Builds:
       - ./build_boringssl.sh
       - popd
     ndk: r21e
+    antifeatures:
+      KnownVuln:
+        en-US: Vulnerability in showing WebP images (CVE-2023-4863)
+
+  - versionName: 10.0.9
+    versionCode: 38730
+    commit: v10.0.9
+    subdir: TMessagesProj_App
+    submodules: true
+    sudo:
+      - apt-get update
+      - apt-get install -y ninja-build golang-go yasm cmake libuv1 make
+    gradle:
+      - afat
+    rm:
+      - TMessagesProj/jni/ffmpeg/tests/ref/fate/sub-microdvd-remux
+    prebuild:
+      - echo -e 'APP_ID = 105811\nAPP_HASH = 3e7a52498eec003c5896a330e5d29397' > API_KEYS
+      - sed -i -e 's/abiVersionCode = 9/abiVersionCode = 10/' build.gradle
+      - cd ../TMessagesProj/jni/libwebp
+      - git fetch
+      - git checkout 20ceff7eb3ccb679bd299f3d481309e10cbf2616
+    scandelete:
+      - TMessagesProj/jni
+    build:
+      - export NDK=$$NDK$$
+      - export NINJA_PATH=/usr/bin/ninja
+      - pushd ../TMessagesProj/jni
+      - ./build_libvpx_clang.sh
+      - ./build_ffmpeg_clang.sh
+      - ./patch_ffmpeg.sh
+      - ./patch_boringssl.sh
+      - ./build_boringssl.sh
+      - popd
+    ndk: r21e
 
 MaintainerNotes: Update check mode not working because of version code calculations
   for different flavours.
@@ -3111,4 +3434,4 @@ ArchivePolicy: 3
 AutoUpdateMode: None
 UpdateCheckMode: None
 CurrentVersion: 10.0.9
-CurrentVersionCode: 38729
+CurrentVersionCode: 38730