Skip to content
This repository has been archived by the owner on Feb 19, 2020. It is now read-only.

CVE-2017-5589+ Multiple XMPP Clients User Impersonation Vulnerability #442

Closed
Neustradamus opened this issue Feb 16, 2017 · 3 comments
Closed

CVE-2017-5589+ Multiple XMPP Clients User Impersonation Vulnerability #442

Neustradamus opened this issue Feb 16, 2017 · 3 comments

Comments

@Neustradamus
Copy link

https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/
@sandrotosi
Copy link

Hello,
this bug will prevent SleekXMPP to be released with the upcoming debian stable release (codename stretch) - could you please have a look at this asap?

thanks!!

@carnil
Copy link

carnil commented Feb 21, 2017

The specific CVE assigned is CVE-2017-5591

@jcahill jcahill mentioned this issue Mar 21, 2017
Open
bear added a commit that referenced this issue Mar 23, 2017
@bear
apply fix for Issue #442
8c66e51
bear added a commit that referenced this issue Mar 23, 2017
@bear
Merge pull request #448 from fritzy/v1.3.2
285495d 
apply fix for Issue #442
@bear
Copy link
Collaborator

bear commented Mar 23, 2017

closing - it's in v1.3.2 and also in develop branch

@bear bear closed this as completed Mar 23, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@bear @Neustradamus @sandrotosi @carnil