Lucene search

K
mageiaGentoo FoundationMGASA-2013-0170
HistoryJun 18, 2013 - 6:56 p.m.

Updated telepathy-gabble package fixes security vulnerability

2013-06-1818:56:53
Gentoo Foundation
advisories.mageia.org
6

0.005 Low

EPSS

Percentile

76.7%

Maksim Otstavnov discovered that the Wocky submodule used by telepathy-gabble does not respect the tls-required flag on legacy Jabber servers. A network intermediary could use this vulnerability to bypass TLS verification and perform a man-in-the-middle attack.