Embed Notice

Conversations 2.12.9 fixes a security issue.

TLDR: Don’t restore backups from unknown sources or backups you have not created yourself.

Backup files can be manipulated in a way that puts personal information (credentials and private keys) in a pending message to an attacker. When the restored account reconnects that information is leaked.

Prior to 2.12.8 external apps could trigger the restore process; however the victim would still have to enter the backup password.

https://codeberg.org/iNPUTmice/Conversations/commit/09f6343ced61a44d87f736889d7c344ce333d6d9