tocsin

Debian/mcabber: high 7.4

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will

Action: Upgrade mcabber to 0.10.2-1.1 or later.

Affected

introducedfixedlast affected
00.10.2-1.1-

Fixed versions

0.10.2-1.1

Sources

published · modified · JSON