[ANN] Prosody 0.11.12 security release

3 views
Skip to first unread message

Matthew Wild

unread,
Jan 13, 2022, 11:08:46 AM1/13/22
to Prosody IM Users Group, Prosody IM Developers Group, prosody-...@googlegroups.com
Hi folks,

We are pleased to announce the release of Prosody 0.11.12.

This is a security release that addresses a denial-of-service
vulnerability that affects Prosody’s mod_websocket. For more information, refer to the advisory at https://prosody.im/security/advisory_20220113/

A summary of changes since the previous release:

Security

-   util.xml: Do not allow doctypes, comments or processing instructions

# Download

As usual, download instructions for many platforms can be found on our
download page: https://prosody.im/download

If you have any questions, comments or other issues with this release,
let us know! https://prosody.im/discuss
Reply all
Reply to author
Forward
0 new messages