stable

prosody-0.9.9-2.el6

FEDORA-EPEL-2016-570414d664 created by robert 10 years ago for Fedora EPEL 6

Prosody 0.9.9

A summary of changes:

Security fixes

Fix path traversal vulnerability in mod_http_files (CVE-2016-1231)
Fix use of weak PRNG in generation of dialback secrets (CVE-2016-1232)

Bugs

Improve handling of CNAME records in DNS
Fix traceback when deleting a user in some configurations (issue #496)
MUC: restrict_room_creation could prevent users from joining rooms (issue #458)
MUC: fix occasional dropping of iq stanzas sent privately between occupants
Fix a potential memory leak in mod_pep

Additions

Add http:list() command to telnet to view active HTTP services
Simplify IPv4/v6 address selection code for outgoing s2s
Add support for importing SCRAM hashes from ejabberd

This update has been submitted for testing by robert.

10 years ago

This update has been pushed to testing.

10 years ago

robert edited this update.

New build(s):

prosody-0.9.9-2.el6

Removed build(s):

prosody-0.9.9-1.el6

10 years ago

This update has been submitted for testing by robert.

10 years ago

This update has been pushed to testing.

10 years ago

volter commented & provided feedback 10 years ago

I'm not using mod_http_files and I'm not sure what dialback secrets are, but it works for me.

This update has been submitted for stable by bodhi.

10 years ago

volter provided feedback 10 years ago

karma

This update has been pushed to stable.

10 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

urgent

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

in stable

10 years ago

modified

10 years ago

Builds

prosody-0.9.9-2.el6

BZ#1296983 CVE-2016-1231 prosody: path traversal vulnerability in mod_http_files

BZ#1296984 CVE-2016-1232 prosody: use of weak PRNG in generation of dialback secrets

prosody-0.9.9-2.el6

Automated Test Results

None