DSA-5047-1 prosody - security update

Bulletin has no description...

openSUSE 15 Security Update : prosody (openSUSE-SU-2022:0012-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0012-1 advisory. - It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML...

OPENSUSE-SU-2022:0012-1 Security update for prosody

This update for prosody fixes the following issues: Update to 0.11.12: CVE-2022-0217: util.xml: Do not allow doctypes, comments or processing instructions bsc1194596...

PT-2022-4676 · Libexpat +2 · Libexpat +2

Name of the Vulnerable Software and Affected Versions: Prosody affected versions not specified Description: The issue is related to the implementation of the WebSocket server module for Jabber/XMPP in Prosody, which is associated with incorrect restriction of XML links to external objects. This c...

Prosodical Thoughts Prosody安全漏洞

Prosodical Thoughts Prosody is a Prosodical Thoughts open source application . A modern XMPP communication server. A security vulnerability exists in Prosodical Thoughts Prosody due to improper validation of untrusted XML data. A remote attacker could send specially crafted data to the affected...

Security update for prosody (important)

openSUSE Security Update: Security update for prosody Announcement ID: openSUSE-SU-2022:0012-1 Rating: important References: 1194596 Cross-References: CVE-2022-0217 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This update f...

Prosody XMPP server advisory 2022-01-13

The Prosody teaM reports: It was discovered that an internal Prosody library to load XML based on does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in expansion of recursive entity references from DTDs CWE-776. In addition, dependi...

The vulnerability of the Prosody server for Jabber/XMPP, related to a resource management mechanism error, allows attackers to trigger a service failure.

The vulnerability of the Prosody Jabber/XMPP server is related to a bug in the resource management mechanism. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the proxy65 component of the Jabber/XMPP Prosody server, related to the absence of an authentication mechanism, allows attackers to trigger a service failure.

The vulnerability of the proxy65 component of the Jabber/XMPP Prosody server lies in the fact that it is configured with open access by default. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the Prosody server for Jabber/XMPP, related to a resource management mechanism error, allows attackers to trigger a service failure.

The vulnerability of the Prosody server for Jabber/XMPP is related to incorrect processing of requests for re-establishing SSL/TLS connections. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Prosody Jabber/XMPP server lies in the simultaneous execution using a shared resource with incorrect synchronization, allowing an attacker to gain access to confidential data.

The vulnerability of the Prosody Jabber/XMPP server is related to the use of an algorithm with non-persistent execution time for comparing secret strings. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the `dialback_without_dialback` option in the `mod_dialback` module of the Prosody Jabber/XMPP server is related to authentication process errors, allowing attackers to access confidential data.

The vulnerability of the dialbackwithoutdialback option in the moddialback module of the Prosody Jabber/XMPP server is related to incorrect authentication of certificates from the remote server. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

CVE-2021-39215

Jitsi Meet is an open source video conferencing application. In versions prior to 2.0.5963, a Prosody module allows the use of symmetrical algorithms to validate JSON web tokens. This means that tokens generated by arbitrary sources can be used to gain authorization to protected rooms. This issue...

Jitsi Meet 授权问题漏洞

Jitsi Meet is is a set of open source projects. Enabling users to use and deploy a video conferencing platform with state-of-the-art video quality and features. A vulnerability in authorization issues exists in versions prior to Jitsi Meet 2.0.5963, which stems from the Prosody module allowing th...

openSUSE 15 Security Update : prosody (openSUSE-SU-2021:1173-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1173-1 advisory. - muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information list of admins, members, owners, and banned...

Security update for prosody (moderate)

openSUSE Security Update: Security update for prosody Announcement ID: openSUSE-SU-2021:1173-1 Rating: moderate References: 1188976 Cross-References: CVE-2021-37601 CVSS scores: CVE-2021-37601 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Backports SLE-15-SP3 ...

OPENSUSE-SU-2021:1173-1 Security update for prosody

This update for prosody fixes the following issues: prosody was updated to 0.11.10: Security: MUC: Fix logic for access to affiliation lists CVE-2021-37601 boo1188976 https://prosody.im/security/advisory20210722/ Minor changes: prosodyctl: Add ‘limits’ to known globals to warn about misplacing it...

Fedora: Security Advisory for prosody (FEDORA-2021-1d574ae400)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for prosody (FEDORA-2021-fe9513e089)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: prosody-0.11.10-1.fc33

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...