oss-sec mailing list archives
Re: CVE id request: telepathy-gabble
From: Josh Bressers <bressers () redhat com>
Date: Thu, 17 Feb 2011 15:40:27 -0500 (EST)
As best as I can tell, we should only need one ID: CVE-2011-1000 • In jingle-factory.c, a malicious contact can trick Gabble into relaying media through a server of their choosing. This allows any contact to intercept your audio and video calls (as opposed to only attacker who can passively intercept your network traffic, which is the normal state of affairs for unencrypted calls). If you think any of the others deserve an ID, let me know. Thanks. -- JB ----- Original Message -----
Can I get a CVE id for: https://bugs.freedesktop.org/show_bug.cgi?id=34048 Thanks! -- Nico Golde - http://www.ngolde.de - nion () jabber ccc de - GPG: 0xA0A0AAAA For security reasons, all text in this mail is double-rot13 encrypted.
Current thread:
- CVE id request: telepathy-gabble Nico Golde (Feb 17)
- Re: CVE id request: telepathy-gabble Josh Bressers (Feb 17)