Debian/ejabberd: unknown
ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.
Action: Upgrade ejabberd to 14.07-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.07-3 | - |
Fixed versions
| 14.07-3 |
Sources
- osv: DEBIAN-CVE-2014-8760#Debian:13/ejabberd
- https://security-tracker.debian.org/tracker/CVE-2014-8760
published · modified · JSON