Fedora 13 : telepathy-gabble-0.10.5-1.fc13 / telepathy-glib-0.11.16-2.fc13 (2011-1903)

The remote Fedora host is missing one or more security updates : telepathy-glib-0.11.16-2.fc13 : - Sun Feb 20 2011 Brian Pepple - 0.11.16-2 - Drop devel require on tp-glib-vala. - Sun Feb 20 2011 Brian Pepple - 0.11.16-1 - Update to 0.11.16. - Bump min version of glib required. - Tue Jun 22 2010...

Fedora Update for telepathy-gabble FEDORA-2011-1668

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for telepathy-gabble FEDORA-2011-1668

Check for the Version of telepathy-gabble OpenVAS Vulnerability Test Fedora Update for telepathy-gabble FEDORA-2011-1668 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Fedora 14 : telepathy-gabble-0.10.5-1.fc14 (2011-1668)

Security bugfix release that includes the following : - fd.o 31412: fix crashes during disconnection if a PEP alias request is in-flight - fd.o34048: Malicious contacts can no longer trick Gabble into relaying audio/video data via a server of their choosing. Note that Tenable Network Security has...

[SECURITY] [DSA 2169-1] telepathy-gabble security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2169-1 [email protected] http://www.debian.org/security/ Nico Golde February 16, 2011 http://www.debian.org/security/faq -...

Debian DSA-2169-1 : telepathy-gabble - insufficient input validation

It was discovered that telepathy-gabble, the Jabber/XMPP connection manager for the Telepathy framework, is processing google:jingleinfo updates without validating their origin. This may allow an attacker to trick telepathy-gabble into relaying streamed media data through a server of his choice a...

CVE-2011-1000

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media...

CVE-2011-1000

CVE-2011-1000 affects Telepathy Gabble (telepathy-gabble) releases prior to the fixed ones: 0.11.x before 0.11.7, 0.10.x before 0.10.5, and 0.8.x before 0.8.15. The vulnerability arises from a crafted google:jingleinfo stanza that can cause a remote attacker to sniff audio/video streams by direct...

CVE-2011-1000

Removed by vendor...

CVE-2011-1000

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media...

Ubuntu: Security Advisory (USN-1067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for telepathy-gabble vulnerability USN-1067-1

Ubuntu Update for Linux kernel vulnerabilities USN-1067-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10671.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for telepathy-gabble vulnerability USN-1067-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu 9.10 / 10.04 LTS / 10.10 : telepathy-gabble vulnerability (USN-1067-1)

It was discovered that Gabble did not verify the from field of google jingleinfo updates. This could allow a remote attacker to perform man in the middle attacks MITM on streamed media. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

USN-1067-1: Telepathy Gabble vulnerability

It was discovered that Gabble did not verify the from field of google jingleinfo updates. This could allow a remote attacker to perform machine-in-the-middle attacks MITM on streamed media...

[SECURITY] [DSA 2169-1] telepathy-gabble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2169-1 [email protected] http://www.debian.org/security/ Nico Golde February 16, 2011 http://www.debian.org/security/faq -...

DSA-2169-1 telepathy-gabble - missing input validation

Bulletin has no description...

CVE-2011-1000

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media...

CVE-2007-6746

telepathy-idle before 0.1.15 does not verify 1 that the issuer is a trusted CA, 2 that the server hostname matches a domain name in the subject's Common Name CN, or 3 the expiration date of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid...