-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-7805 2011-06-03 05:02:11 --------------------------------------------------------------------------------
Name : jabberd Product : Fedora 14 Version : 2.2.14 Release : 1.fc14 URL : http://codex.xiaoka.com/wiki/jabberd2:start Summary : OpenSource server implementation of the Jabber protocols Description : The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the latest protocol revisions. jabberd2 is the next generation of the jabberd server. It has been rewritten from the ground up to be scalable, architecturally sound, and to support the latest protocol extensions coming out of the JSF. This package defaults to use pam and sqlite. -------------------------------------------------------------------------------- Update Information: This update fixes an important security issue (CVE-2011-1755), for more information, please see https://bugzilla.redhat.com/show_bug.cgi?id=700390. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 1 2011 Dominic Hopf <[email protected]> - 2.2.14-1 - update to 2.2.14 (#700390, CVE-2011-1755) - remove unneeded upstart configuration files * Thu Apr 14 2011 Dominic Hopf <[email protected]> - 2.2.13-1 - updated to 2.2.13 * Wed Jan 5 2011 Adrian Reber <[email protected]> - 2.2.11-7 - ported spec changes from f14 branch to devel branch - fix "jabberd spec file puts server.pem in /etc instead of /etc/jabberd" (#667504) * Tue Nov 9 2010 Dominic Hopf <[email protected]> - 2.2.11-3 - re-add the server.pem ghost as %config(noreplace) to prevent the file from being deleted when updating to this package - fix permissions for directories and files under /var/lib/jabberd -------------------------------------------------------------------------------- References: [ 1 ] Bug #700390 - CVE-2011-1755 jabberd: DoS via the XML "billion laughs attack" https://bugzilla.redhat.com/show_bug.cgi?id=700390 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update jabberd' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
