3 matches found
Updated dino packages fix security vulnerability
When a Dino client receives a specifically crafted message from an unauthorized sender, it would use information from that message to add, update or remove entries in the user’s personal bookmark store without requiring further user interaction. CVE-2023-28686...
The vulnerability of the /xep/0280_message_carbons.vala client module for exchanging instant messages with dino, related to insufficient validation of input data, allows a perpetrator to compromise the integrity of the data.
The vulnerability of the /xep/0280messagecarbons.vala module of the instant messaging client dino is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...
