Introducing security advisories and JSA-2020-0001

Hi all,

Security is one of our guiding principles when developing Jitsi Meet. Unfortunately, as humans, we make mistakes and thus security issues do happen. This category was originally created for disclosing security related issues, but after some discussion we think we have found a better way going forward.

Henceforth, we’ll be publishing our security advisories here: https://github.com/jitsi/security-advisories

This will be your one-stop-shop for Jitsi security. Once we publish an advisory we’ll also use the corresponding repository’s Security Advisory GH feature as well as post here.

With that, here is our first such advisory: https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2020-0001.md - Electron users, please update if you haven’t already!

Cheers,

1 Like