UbuntuUpdates.org

Package "telepathy-gabble"

Name: telepathy-gabble

Description:

Jabber/XMPP connection manager

Latest version: 0.16.0-0ubuntu3.1
Release: precise (12.04)
Level: updates
Repository: main
Homepage: http://telepathy.freedesktop.org/wiki/

Links


Download "telepathy-gabble"


Other versions of "telepathy-gabble" in Precise

Repository Area Version
base main 0.16.0-0ubuntu1
security main 0.16.0-0ubuntu3.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.16.0-0ubuntu3.1 2013-06-12 15:09:40 UTC

  telepathy-gabble (0.16.0-0ubuntu3.1) precise-security; urgency=low

  * SECURITY UPDATE: multiple denial of service issues
    - debian/patches/CVE-2013-1769.patch: fix DoS issues in
      lib/ext/wocky/wocky/wocky-caps-hash.c,
      lib/ext/wocky/wocky/wocky-data-form.c,
      src/conn-presence.c.
    - CVE-2013-1769
  * SECURITY UPDATE: information disclosure via legacy Jabber TLS bypass
    - debian/patches/CVE-2013-1431.patch: validate TLS requests in
      lib/ext/wocky/wocky/wocky-connector.c, added tests to
      tests/twisted/Makefile.am, tests/twisted/gabbletest.py,
      tests/twisted/tls/legacy-jabber.py.
    - CVE-2013-1431
 -- Marc Deslauriers <email address hidden> Fri, 07 Jun 2013 09:27:20 -0400

Source diff to previous version
CVE-2013-1769 Crashes when trying to hash caps containing pathological data forms

Version: 0.16.0-0ubuntu3 2013-05-30 13:07:28 UTC

  telepathy-gabble (0.16.0-0ubuntu3) precise; urgency=low

  * git_deal_with_iterate_updates.patch: to fix a potential use-after-free
    when disconnecting with TLS verification channels open (lp: #1020317)
 -- Sebastien Bacher <email address hidden> Thu, 28 Feb 2013 11:32:52 +0100

Source diff to previous version
1020317 telepathy-gabble crashed with SIGSEGV in tp_base_channel_close()

Version: 0.16.0-0ubuntu2 2012-07-25 05:06:49 UTC

  telepathy-gabble (0.16.0-0ubuntu2) precise-proposed; urgency=low

  * git_init_tablet_call.patch,
    git_gtalk_android_calls.patch:
    - git fixes for call with android devices
  * git_wocky_connect_problems.patch,
    git_wocky_see_other_host.patch,
    git_tls_verification.patch:
    - git fixes for msn over xmmp use (lp: #1017405)
 -- Sebastien Bacher <email address hidden> Mon, 09 Jul 2012 17:26:28 +0200

1017405 Could not connect to MSN



About   -   Send Feedback to @ubuntu_updates