oss-sec mailing list archives
CVE request: ejabberd compression allows cirucumvention of encryption despite starttls_required
From: Hanno Böck <hanno () hboeck de>
Date: Mon, 13 Oct 2014 15:09:30 +0200
I think this deserves a CVE: http://mail.jabber.org/pipermail/operators/2014-October/002438.html Patch/Fix: https://github.com/processone/ejabberd/commit/7bdc1151b -- Hanno Böck http://hboeck.de/ mail/jabber: hanno () hboeck de GPG: BBB51E42
Attachment:
signature.asc
Description:
Current thread:
- CVE request: ejabberd compression allows cirucumvention of encryption despite starttls_required Hanno Böck (Oct 13)