hugo/content/about/security/advisories/cve-2022-26491.md@4ab2b8637540
hugo/content/about/security/advisories/cve-2022-26491.md
Fri, 30 Aug 2024 19:33:36 -0500
- author
- Gary Kramlich <grim@reaperworld.com>
- date
- Fri, 30 Aug 2024 19:33:36 -0500
- changeset 543
- 4ab2b8637540
- parent 488
- bddb1b032e08
- permissions
- -rw-r--r--
Update the plugins page for the new process
This includes defining the process and providing a template for a new issue to
add new plugins. I did go through and audit `No IRC /WHO` so we had at least
one validated entry.
Testing Done:
Ran `npm run hugo:server` locally and verified the page worked and checked the new links.
Bugs closed: NEST-53
Reviewed at https://reviews.imfreedom.org/r/3450/
--- title: cve-2022-26491-00 date: 2022-04-28T10:40:22+00:00 cveNumber: cve-2022-26491 summary: MITM when used without DNSSEC discoveredBy: moparisthebest fixedInRelease: 2.14.9 type: security layout: cve --- ### Description If not using DNSSEC it is trivial to perform a man in the middle attack a client via DNS spoofing. You can find more discussion in the [XMPP Standards Archives](https://mail.jabber.org/pipermail/standards/2022-February/038759.html). ### Mitigation Removed the code that supported the `_xmppconnect` DNS TXT record.
