Lucene search

K
mageiaGentoo FoundationMGASA-2016-0433
HistoryDec 31, 2016 - 1:22 a.m.

Updated mcabber packages fix security vulnerability

2016-12-3101:22:42
Gentoo Foundation
advisories.mageia.org
7

0.01 Low

EPSS

Percentile

83.5%

It was discovered that there was a “roster push attack” vulnerability in mcabber, a console-based Jabber (XMPP) client. A remote attacker can modify the roster and intercept messages via a crafted roster-push IQ stanza (CVE-2016-9928).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchmcabber< 0.10.1-9.1mcabber-0.10.1-9.1.mga5