Hi,

just upgraded my server from Ubuntu 10.04 to 12.04 and noticed that
jabberd2 stopped working.

I finally tracked it down to the expat library which now contains a
"fix" for CVE-2012-0876. This fix tries to add some randomisation to
expat's own hash tables, but by doing so fiddles with srand and
thereby makes the random ids generated by jabberd2 much less random.

One way around this is by using the new function XML_SetHashSalt just
after creating an XML parser...


Christof

-- 

http://cmeerw.org                              sip:cmeerw at cmeerw.org
mailto:cmeerw at cmeerw.org                   xmpp:cmeerw at cmeerw.org


Reply via email to