Fedora 13 : telepathy-gabble-0.10.5-1.fc13 / telepathy-glib-0.11.16-2.fc13 (2011-1903)

The remote Fedora host is missing one or more security updates : telepathy-glib-0.11.16-2.fc13 : - Sun Feb 20 2011 Brian Pepple - 0.11.16-2 - Drop devel require on tp-glib-vala. - Sun Feb 20 2011 Brian Pepple - 0.11.16-1 - Update to 0.11.16. - Bump min version of glib required. - Tue Jun 22 2010...

Fedora Update for telepathy-gabble FEDORA-2011-1668

Check for the Version of telepathy-gabble OpenVAS Vulnerability Test Fedora Update for telepathy-gabble FEDORA-2011-1668 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Fedora Update for telepathy-gabble FEDORA-2011-1668

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 14 : telepathy-gabble-0.10.5-1.fc14 (2011-1668)

Security bugfix release that includes the following : - fd.o 31412: fix crashes during disconnection if a PEP alias request is in-flight - fd.o34048: Malicious contacts can no longer trick Gabble into relaying audio/video data via a server of their choosing. Note that Tenable Network Security has...

[SECURITY] [DSA 2169-1] telepathy-gabble security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2169-1 [email protected] http://www.debian.org/security/ Nico Golde February 16, 2011 http://www.debian.org/security/faq -...

Debian DSA-2169-1 : telepathy-gabble - insufficient input validation

It was discovered that telepathy-gabble, the Jabber/XMPP connection manager for the Telepathy framework, is processing google:jingleinfo updates without validating their origin. This may allow an attacker to trick telepathy-gabble into relaying streamed media data through a server of his choice a...

CVE-2011-1000

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media...

CVE-2011-1000

CVE-2011-1000 affects Telepathy Gabble (telepathy-gabble) releases prior to the fixed ones: 0.11.x before 0.11.7, 0.10.x before 0.10.5, and 0.8.x before 0.8.15. The vulnerability arises from a crafted google:jingleinfo stanza that can cause a remote attacker to sniff audio/video streams by direct...

CVE-2011-1000

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media...

CVE-2011-1000

Removed by vendor...

Ubuntu 9.10 / 10.04 LTS / 10.10 : telepathy-gabble vulnerability (USN-1067-1)

It was discovered that Gabble did not verify the from field of google jingleinfo updates. This could allow a remote attacker to perform man in the middle attacks MITM on streamed media. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Ubuntu Update for telepathy-gabble vulnerability USN-1067-1

Ubuntu Update for Linux kernel vulnerabilities USN-1067-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10671.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for telepathy-gabble vulnerability USN-1067-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1067-1: Telepathy Gabble vulnerability

It was discovered that Gabble did not verify the from field of google jingleinfo updates. This could allow a remote attacker to perform machine-in-the-middle attacks MITM on streamed media...

[SECURITY] [DSA 2169-1] telepathy-gabble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2169-1 [email protected] http://www.debian.org/security/ Nico Golde February 16, 2011 http://www.debian.org/security/faq -...

CVE-2011-1000

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media...

DSA-2169-1 telepathy-gabble - missing input validation

Bulletin has no description...

CVE-2007-6746

telepathy-idle before 0.1.15 does not verify 1 that the issuer is a trusted CA, 2 that the server hostname matches a domain name in the subject's Common Name CN, or 3 the expiration date of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid...