Account Options

  1. Sign in
The old Google Groups will be going away soon.
Switch to the new Google Groups.
Google Groups Home
« Groups Home
Security Release DJabberd 0.85
There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic.
There was an error processing your request. Please try again.
flag
  2 messages - Collapse all  -  Translate all to Translated (View all originals)
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Followup To:
Add Cc | Add Followup-to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers you hear
 
Yann  
View profile  
 More options Jun 13 2011, 6:26 pm
From: Yann <yann.kerhe...@gmail.com>
Date: Mon, 13 Jun 2011 15:26:56 -0700 (PDT)
Local: Mon, Jun 13 2011 6:26 pm
Subject: Security Release DJabberd 0.85
Mart is currently pushing 0.85 version of DJabberd to CPAN, upgrade is
strongly advised as it contains a fix
for a security hole disclosed by Wouter Coekaerts, allowing a user to
gain read-access to files on the server.

Note that this is distinct from the "billion laughs" attack mentioned
earlier, there is still no fix for this.

Changes:
https://raw.github.com/djabberd/DJabberd/master/CHANGES

Github:
https://github.com/djabberd/DJabberd/tree/7e212c9b58b0529046fde93815a...

If you just want to patch 0.84 version the patch is here:
https://github.com/djabberd/DJabberd/commit/b41d6dc247a175fe8e092d6ec...

Yann


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Yann Kerherve  
View profile  
 More options Jun 13 2011, 6:31 pm
From: Yann Kerherve <yann.kerhe...@gmail.com>
Date: Mon, 13 Jun 2011 15:31:22 -0700
Local: Mon, Jun 13 2011 6:31 pm
Subject: Re: Security Release DJabberd 0.85
 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
End of messages
« Back to Discussions « Newer topic     Older topic »