Debian/gajim: medium 5.4

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.

Action: Upgrade gajim to 0.16.5-0.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2015-8688
• https://security-tracker.debian.org/tracker/CVE-2015-8688

published 2016-01-15T19:59:03.133Z · modified 2026-09-09T07:02:02.997284342Z · JSON