Skip to content

Fix security vulnerability CVE-2025-59489 by upgrading to Unity 6 (6000.1.17f1)#11

Open
pierceob11 wants to merge 1 commit intolivekit-examples:mainfrom
pierceob11:unity6-compatibility
Open

Fix security vulnerability CVE-2025-59489 by upgrading to Unity 6 (6000.1.17f1)#11
pierceob11 wants to merge 1 commit intolivekit-examples:mainfrom
pierceob11:unity6-compatibility

Conversation

@pierceob11
Copy link
Copy Markdown

Description

Fixes security vulnerability CVE-2025-59489 by upgrading from Unity 2022.3.20f1 to Unity 6000.1.17f1. Unity Hub flagged this vulnerability when opening the project.

All existing functionality works without modification after the upgrade.

Security Impact

  • CVE: CVE-2025-59489
  • Affected Version: Unity 2022.3.20f1
  • Fixed Version: Unity 6000.1.17f1
  • Severity: Flagged by Unity Hub as requiring upgrade

Testing Performed

  • ✅ Project opens without compilation errors
  • ✅ Sample scene runs successfully
  • ✅ Room connection works (displays "Connected to my-room")
  • ✅ Camera toggle (on/off) functions correctly
  • ✅ Microphone toggle (on/off) functions correctly
  • ✅ Data publishing works
  • ✅ Clean disconnect works

Changes

  • Updated ProjectSettings/ProjectVersion.txt to Unity 6000.1.17f1
  • Unity automatically updated package dependencies in manifest.json and packages-lock.json
  • Added MultiplayerManager.asset (new Unity 6 feature)
  • Updated ProjectSettings.asset with Unity 6 settings

Environment

  • Unity Version: 6000.1.17f1 (Unity 6)
  • Platform: Windows
  • Previous Unity Version: 2022.3.20f1 (vulnerable)

Notes

No code changes were required. The LiveKit SDK and sample app are fully compatible with Unity 6, and the security vulnerability is resolved by the Unity version upgrade.

- Upgraded project from Unity 2022.3.20f1 to Unity 6000.1.17f1
- Tested core functionality: connection, camera/mic toggle, data publishing
- All features work as expected with no code changes required
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant