Updated dino packages fix security vulnerability

When a Dino client receives a specifically crafted message from an unauthorized sender, it would use information from that message to add, update or remove entries in the user’s personal bookmark store without requiring further user interaction. CVE-2023-28686...

/xep/0280_message_carbons.vala Insufficient Validation

The vulnerability of the /xep/0280messagecarbons.vala module of the instant messaging client dino is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

DEBIAN-CVE-2019-16235

Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280messagecarbons.vala...