DLA-967-1 gajim - security update

Bulletin has no description...

CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...

DEBIAN-CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...

UBUNTU-CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...

Code injection

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...

CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...

CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...

CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...

CVE-2016-10376

Gajim (XMPP client) up to version 0.16.7 unconditionally implements XEP-0146: Remote Controlling Clients, allowing a malicious XMPP server to trigger actions and potentially leak plaintext from OTR sessions. Public advisories (Debian, Gentoo, Fedora) note this behavior and provide patches/mitigat...

CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions...

Information disclosure

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-9107

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-9107

CVE-2016-9107 concerns the Gajim OTR plugin, where information is sent in cleartext when using XHTML. This leads to a potential information disclosure vulnerability, allowing remote attackers to obtain sensitive data via unspecified vectors. The affected component is the Gajim OTR plugin; the roo...

CVE-2016-9107

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

openSUSE Security Update : mcabber (openSUSE-2016-1502)

This update for mcabber fixes the following issues : - Update to version 1.0.4 changes since 1.0.2 : - Check the origin of roster pushes boo1014976, CVE-2015-8688 Gajim, https://gultsch.de/gajimrosterpushandmessageinterce ption.html - Link with the tinfo library. - Fix default modules directory o...

Gajim OTR Plugin Information Disclosure Vulnerability

Gajim is a suite of free instant messaging software based on the Jabber communication protocol developed by the Gajim project. An information disclosure vulnerability exists in Gajim OTR Plugin, which can be exploited by attackers to obtain sensitive information...

Debian Security Advisory DSA 3492-1 (gajim - security update)

Daniel Gultsch discovered a vulnerability in Gajim, an XMPP/jabber client. Gajim didn OpenVAS Vulnerability Test $Id: deb3492.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3492-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 20...

Debian: Security Advisory (DSA-3492-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : gajim-0.16.5-1.fc23 (2016-c82e5c322c)

Version 0.16.5 of Gajim has been released. What's new since 0.16.4: Improve Message Archive Management implementation Improve security on connexion and for roster management CVE-2015-8688 Full changelog: http://hg.gajim.org/gajim/file/gajim-0.16.5/ChangeLog List of fixed bugs:...

Fedora 22 : gajim-0.16.5-1.fc22 (2016-838200213e)

Version 0.16.5 of Gajim has been released. What's new since 0.16.4: Improve Message Archive Management implementation Improve security on connexion and for roster management CVE-2015-8688 Full changelog: http://hg.gajim.org/gajim/file/gajim-0.16.5/ChangeLog List of fixed bugs:...