Security update for prosody (moderate)

2018-06-0915:11:02

lists.opensuse.org

103

EPSS

0.002

Percentile

59.1%

JSON

This update for prosody fixes the following issues:

This security issue was fixed:

CVE-2018-10847: Prevent insufficient validation of client-provided
parameters during XMPP stream restarts. Authenticated users may have
overriden the realm associated with their session, potentially bypassing
security policies and allowing impersonation (bsc#1094890).

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3i586prosody-debugsource< 0.9.13-2.6.1prosody-debugsource-0.9.13-2.6.1.i586.rpm
openSUSE Leap42.3x86_64prosody-debuginfo< 0.9.13-2.6.1prosody-debuginfo-0.9.13-2.6.1.x86_64.rpm
openSUSE Leap42.3i586prosody< 0.9.13-2.6.1prosody-0.9.13-2.6.1.i586.rpm
openSUSE Leap42.3x86_64prosody-debugsource< 0.9.13-2.6.1prosody-debugsource-0.9.13-2.6.1.x86_64.rpm
openSUSE Leap42.3i586prosody-debuginfo< 0.9.13-2.6.1prosody-debuginfo-0.9.13-2.6.1.i586.rpm
openSUSE Leap42.3x86_64prosody< 0.9.13-2.6.1prosody-0.9.13-2.6.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	i586	prosody-debugsource	< 0.9.13-2.6.1	prosody-debugsource-0.9.13-2.6.1.i586.rpm
openSUSE Leap	42.3	x86_64	prosody-debuginfo	< 0.9.13-2.6.1	prosody-debuginfo-0.9.13-2.6.1.x86_64.rpm
openSUSE Leap	42.3	i586	prosody	< 0.9.13-2.6.1	prosody-0.9.13-2.6.1.i586.rpm
openSUSE Leap	42.3	x86_64	prosody-debugsource	< 0.9.13-2.6.1	prosody-debugsource-0.9.13-2.6.1.x86_64.rpm
openSUSE Leap	42.3	i586	prosody-debuginfo	< 0.9.13-2.6.1	prosody-debuginfo-0.9.13-2.6.1.i586.rpm
openSUSE Leap	42.3	x86_64	prosody	< 0.9.13-2.6.1	prosody-0.9.13-2.6.1.x86_64.rpm