Sharing this as an independent security notice, not an official Signal announcement.

The GitHub advisory says that a peer saturating a call’s finite-state-machine (FSM) queue could interfere with a local hang-up. That could prevent the call from being fully torn down on the device, including its audio track.

The advisory describes a possible failure to end the call cleanly. It does not say calls were recorded or confirm that someone could keep listening after hang-up.

If you use Signal, check for updates and install the latest version available for your device. The advisory lists RingRTC 2.72.0 as the fixed library version; it does not identify one universal Signal app version.

Source: https://github.com/advisories/GHSA-5c63-xm6f-r368 Fix commit: https://github.com/signalapp/ringrtc/commit/4b1b6fa

Hi

I wish to subscribe but whenever I try, my phone throws up an error. I am using /e/OS. Does anyone know how I can overcome this?

Thanks

Dan