ALT-PU-2021-4799-1
Package gajim updated to version 1.3.3-alt2 for branch sisyphus_e2k.
Closed vulnerabilities
Published: 2021-10-10
BDU:2022-05556
Уязвимость расширения XEP-0308 Last Message Correction Jabber/XMPP-клиента Gajim, позволяющая нарушителю вызвать отказ в обслуживании
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2021-10-11
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2021-41055
Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted XMPP Last Message Correction (XEP-0308) message in multi-user chat, where the message ID equals the correction ID.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Closed bugs
Не запускается, требует python-nbxmpp >= 2.0.4