hugo/content/about/security/advisories/cve-2009-3085-00.md@cf811d26020d
hugo/content/about/security/advisories/cve-2009-3085-00.md
Thu, 02 Jan 2025 16:35:59 -0600
- author
- Gary Kramlich <grim@reaperworld.com>
- date
- Thu, 02 Jan 2025 16:35:59 -0600
- changeset 545
- cf811d26020d
- parent 402
- 91f916eba5fd
- permissions
- -rw-r--r--
Add a flathub verification token
Testing Done:
Ran with `npm run hugo:server` and verified the file was served properly.
Reviewed at https://reviews.imfreedom.org/r/3718/
--- title: cve-2009-3085-00 date: 2009-09-03T00:00:00.000Z cveNumber: cve-2009-3085 summary: XMPP custom smiley parsing bug discoveredBy: Florob, Waqas, Paul Aurich and Marcus Lundblad fixedInRelease: 2.6.2 type: security layout: cve hidden: true --- ### Description The XMPP protocol plugin can crash when attempting to process an error response as a custom smiley. libpurple 2.5.2 through 2.6.1 are vulnerable. Older versions may be vulnerable as well. ### Mitigation Handle error iq responses appropriately.
