Lucene search
OpenWrt ProjectOPENWRT-SA-000003HistoryJan 28, 2016 - 12:23 p.m.
prosody: Security update (2 CVEs)
2016-01-2812:23:46
OpenWrt Project
lists.openwrt.org
621
0.012 Low
EPSS
Percentile
83.4%
The prosody package has been rebuilt and was uploaded to the Chaos
Calmer 15.05 repository due to multiple security issues.
VERSION
0.9.8-1 => 0.9.9-1
CHANGELOG
[Mon, 25 Jan 2016 13:31:29 +0100 bb23089]
fixes:
- path traversal vulnerability in mod_http_files (CVE-2016-1231)
- use of weak PRNG in generation of dialback secrets (CVE-2016-1232)
CHANGES
net/prosody/Makefile | 4 +±-
net/prosody/patches/010-fix-randomseed.patch | 12 ------------
2 files changed, 2 insertions(+), 14 deletions(-)
Related
debian
debian
[SECURITY] [DSA 3439-1] prosody security update
2016-01-10 10:07:09
[SECURITY] [DSA 3439-1] prosody security update
2016-01-10 10:07:09
[SECURITY] [DLA 391-1] prosody security update
2016-01-16 09:35:13
nessus
nessus
Fedora 22 : prosody-0.9.9-2.fc22 (2016-e289f41b76)
2016-03-04 00:00:00
FreeBSD : prosody -- multiple vulnerabilities (842cd117-ba54-11e5-9728-002590263bf5)
2016-01-14 00:00:00
Debian DSA-3439-1 : prosody - security update
2016-01-11 00:00:00
osv
osv
prosody - security update
2016-01-10 00:00:00
prosody - security update
2016-01-30 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3439-1)
2016-01-09 00:00:00
Debian Security Advisory DSA 3439-1 (prosody - security update)
2016-01-10 00:00:00
Fedora Update for prosody FEDORA-2016-38
2016-01-21 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: prosody-0.9.9-2.fc22
2016-01-21 04:52:34
[SECURITY] Fedora 23 Update: prosody-0.9.9-2.fc23
2016-01-20 22:00:48
freebsd
freebsd
prosody -- multiple vulnerabilities
2016-01-08 00:00:00
openwrt
openwrt
prosody: Security update (2 CVEs)
2016-01-28 12:25:32
ubuntucve
ubuntucve
CVE-2016-1231
2016-01-12 00:00:00
CVE-2016-1232
2016-01-12 00:00:00
cve
cve
CVE-2016-1231
2016-01-12 20:59:00
CVE-2016-1232
2016-01-12 20:59:00
debiancve
debiancve
CVE-2016-1232
2016-01-12 20:59:00
CVE-2016-1231
2016-01-12 20:59:00
prion
prion
Directory traversal
2016-01-12 20:59:00
Authentication flaw
2016-01-12 20:59:00