ALT-PU-2016-1317

Низкий

ALT-PU-2016-1317: package ejabberd update to version 2.1.13-alt1

Источник

errata.altlinux.org

Дата публикации

11.04.2016

Дата обновления

11.04.2016

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades ejabberd to version 2.1.13-alt1.

Устраненные уязвимости2

CVE-2013-6169

Средний 4.3

Дата публикации: 17.10.2013

CWE-310

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.

CVSS 2.0

Средний 4.3

AV:N/AC:M/Au:N/C:N/I:N/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2013-6169 https://nvd.nist.gov/vuln/detail/CVE-2013-6169

Ссылки1

ALT-PU-2016-1317 https://errata.altlinux.org/ALT-PU-2016-1317

Связанные уязвимости

CVE-2014-8760

ubuntu

около 12 лет назад

ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.

CVE-2014-8760

nvd

около 12 лет назад

ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.

CVE-2014-8760

debian

около 12 лет назад

ejabberd before 2.1.13 does not enforce the starttls_required setting ...

CVE-2013-6169

ubuntu

около 13 лет назад

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.

CVE-2013-6169

nvd

около 13 лет назад

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.