botibal (>=0.7.3, <=0.8.0) potentially affected by CVE-2017-5589 +1 more via slixmpp (1.1.0)

slixmpp PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on slixmpp and may be impacted: - botibal =0.7.3, =0.8.0 Source cves: CVE-2017-5589, CVE-2017-5591 Source advisory: GHSA-C35G-JR5F-H83P...

openSUSE Security Update : mcabber (openSUSE-2017-282)

mcabber was updated to 1.0.5 to fix the following issues : - Much better performances with huge rosters. - Fix an issue with carbons CVE-2017-5589, boo1024690. - Fix a small memory leak. - contrib/vim: Support reloading filetype detection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

botibal (>=0.7.3, <=0.8.0) potentially affected by CVE-2017-5589 +1 more via slixmpp (1.1.0)

slixmpp PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on slixmpp and may be impacted: - botibal =0.7.3, =0.8.0 Source cves: CVE-2017-5589, CVE-2017-5591 Source advisory: MEND:CVE-2017-5591...

CVE-2017-5589

Technical details about CVE-2017-5589 are not provided in the connected documents. The initial description mentions impersonation via XEP-0280 in Yaxim, but no concrete affected products, versions, impact, or fixes are given here. Monitor for updates.