openSUSE Security Update : prosody (openSUSE-2018-596)

This update for prosody to version 0.10.2 fixes the following issues : This security issue was fixed : - CVE-2018-10847: Prevent insufficient validation of client-provided parameters during XMPP stream restarts. Authenticated users may have overriden the realm associated with their session,...

Fedora 27 : prosody (2018-455803056d)

Prosody 0.10.2 ============== See upstream's blog post at https://blog.prosody.im/prosody-0-10-2-security-release/ for a full overview of the release changes. Prosody 0.10.2 fixes a cross-host authentication vulnerability, CVE-2018-10847. The issue affects Prosody instances that have multiple...

Security update for prosody (moderate)

This update for prosody to version 0.10.2 fixes the following issues: This security issue was fixed: - CVE-2018-10847: Prevent insufficient validation of client-provided parameters during XMPP stream restarts. Authenticated users may have overriden the realm associated with their session,...

Fedora 26 : gajim (2017-e6deec5bd0)

Gajim 0.16.8 - Fix rejoining MUCs after connection loss - Fix Groupchat invites - Fix encoding problems with newer GnuPG versions - Fix old messages randomly reappearing in the chat window - Fix some problems with IBB filetransfer - Make XEP-0146 Commands opt-in - Improve sending messages to your...

Fedora 24 : gajim (2017-62547837ba)

Gajim 0.16.8 - Fix rejoining MUCs after connection loss - Fix Groupchat invites - Fix encoding problems with newer GnuPG versions - Fix old messages randomly reappearing in the chat window - Fix some problems with IBB filetransfer - Make XEP-0146 Commands opt-in - Improve sending messages to your...

openSUSE Security Update : mcabber (openSUSE-2016-1502)

This update for mcabber fixes the following issues : - Update to version 1.0.4 changes since 1.0.2 : - Check the origin of roster pushes boo1014976, CVE-2015-8688 Gajim, https://gultsch.de/gajimrosterpushandmessageinterce ption.html - Link with the tinfo library. - Fix default modules directory o...

[SECURITY] Fedora 23 Update: mcabber-1.0.4-1.fc23

mcabber is a console Jabber instant messaging/chat client with SSL support, MUC Multi-User Chat support, history logging, commands completion, and extern al action triggers...

[SECURITY] Fedora 24 Update: mcabber-1.0.4-1.fc24

mcabber is a console Jabber instant messaging/chat client with SSL support, MUC Multi-User Chat support, history logging, commands completion, and extern al action triggers...

[SECURITY] Fedora 25 Update: mcabber-1.0.4-1.fc25

mcabber is a console Jabber instant messaging/chat client with SSL support, MUC Multi-User Chat support, history logging, commands completion, and extern al action triggers...

MUC Airport, Munich Airport - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application MUC Airport, Munich Airport published at the 'play' market has multiple vulnerabilities...

Fedora 23 : prosody-0.9.9-2.fc23 (2016-38e48069f8)

Prosody 0.9.9 ============= A summary of changes: Security fixes -------------- Fix path traversal vulnerability in modhttpfiles CVE-2016-1231 Fix use of weak PRNG in generation of dialback secrets CVE-2016-1232 Bugs ---- Improve handling of CNAME records in DNS Fix traceback when deleting a user...

Fedora 22 : prosody-0.9.9-2.fc22 (2016-e289f41b76)

Prosody 0.9.9 ============= A summary of changes: Security fixes -------------- Fix path traversal vulnerability in modhttpfiles CVE-2016-1231 Fix use of weak PRNG in generation of dialback secrets CVE-2016-1232 Bugs ---- Improve handling of CNAME records in DNS Fix traceback when deleting a user...

Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64

CVE-2010-0277 pidgin MSN protocol plugin memory corruption CVE-2010-0420 pidgin: Finch XMPP MUC Crash CVE-2010-0423 pidgin: Smiley Denial of Service An input sanitization flaw was found in the way Pidgin's MSN protocol implementation handled MSNSLP invitations. A remote attacker could send a...

Openfire 3.6.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45682/info Openfire is prone to multiple cross-site-scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

openSUSE Security Update : finch (finch-2032)

This update of pidgin fixes various security vulnerabilities - CVE-2010-0013: CVSS v2 Base Score: 4.3: Path Traversal CWE-22 Remote file disclosure vulnerability by using the MSN protocol. - CVE-2010-0277: CVSS v2 Base Score: 4.9: Resource Management Errors CWE-399 MSN protocol plugin in libpurpl...

openSUSE Security Update : finch (finch-2032)

This update of pidgin fixes various security vulnerabilities - CVE-2010-0013: CVSS v2 Base Score: 4.3: Path Traversal CWE-22 Remote file disclosure vulnerability by using the MSN protocol. - CVE-2010-0277: CVSS v2 Base Score: 4.9: Resource Management Errors CWE-399 MSN protocol plugin in libpurpl...

openSUSE Security Update : finch (finch-2032)

This update of pidgin fixes various security vulnerabilities - CVE-2010-0013: CVSS v2 Base Score: 4.3: Path Traversal CWE-22 Remote file disclosure vulnerability by using the MSN protocol. - CVE-2010-0277: CVSS v2 Base Score: 4.9: Resource Management Errors CWE-399 MSN protocol plugin in libpurpl...

SuSE 11 Security Update : pidgin (SAT Patch Number 2019)

This update of pidgin fixes various security vulnerabilities : - Remote file disclosure vulnerability by using the MSN protocol. CVE-2010-0013: CVSS v2 Base Score: 4.3 : Path Traversal CWE-22 - MSN protocol plugin in libpurple allowed remote attackers to cause a denial of service memory corruptio...

CVE-2010-0420

libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...

CVE-2010-0420

Pidgin (finch) libpurple vulnerability CVE-2010-0420 affects Finch’s XMPP MUC implementation. A crafted MUC nickname containing HTML sequences can be parsed incorrectly, allowing a remote attacker to crash the application (DoS). Affected software includes libpurple in Finch/Pidgin prior to v2.6....