hugo/content/about/security/advisories/cve-2009-3085-00.md

Fri, 28 Feb 2025 00:58:39 -0600

author
Gary Kramlich <grim@reaperworld.com>
date
Fri, 28 Feb 2025 00:58:39 -0600
changeset 547
8400662befb3
parent 402
91f916eba5fd
permissions
-rw-r--r--

Add the Meshtastic plugin

I meant to add this awhile ago but somehow missed it.

Testing Done:
Ran `npm run hugo:server` and verified the plugin showed up.

Reviewed at https://reviews.imfreedom.org/r/3861/

---
title: cve-2009-3085-00
date: 2009-09-03T00:00:00.000Z
cveNumber: cve-2009-3085
summary: XMPP custom smiley parsing bug
discoveredBy: Florob, Waqas, Paul Aurich and Marcus Lundblad
fixedInRelease: 2.6.2
type: security
layout: cve
hidden: true
---

### Description

The XMPP protocol plugin can crash when attempting to process an error response
as a custom smiley. libpurple 2.5.2 through 2.6.1 are vulnerable. Older versions
may be vulnerable as well.

### Mitigation

Handle error iq responses appropriately.

mercurial