Source: prosody Version: 0.9.7-2 Severity: grave Tags: security upstream Justification: user security hole Control: found -1 0.10.1-1 Control: forwarded -1 https://issues.prosody.im/1147
Hi, The following vulnerability was published for prosody. CVE-2018-10847[0]: insufficient stream header validation If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2018-10847 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10847 [1] https://issues.prosody.im/1147 [2] https://blog.prosody.im/prosody-0-10-2-security-release/ Regards, Salvatore