Bug 850872 (CVE-2012-3525)
Summary: | CVE-2012-3525 jabberd: Prone to unsolicited XMPP Dialback attacks | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Jan Lieskovsky <jlieskov> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED ERRATA | QA Contact: | Dimitar Yordanov <dyordano> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | adrian, clocklea, cperry, dmaphy, dyordano, jpazdziora, mmraka, mzazrivec |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2013-09-20 02:02:29 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 880130, 882195 | ||
Bug Blocks: | 850876 |
Description
Jan Lieskovsky
2012-08-22 15:21:02 UTC
This issue has been corrected in the (upcoming) Fedora and Fedora EPEL jabberd packages: Rawhide: jabberd-2.2.16-5.fc18 Fedora-17: jabberd-2.2.14-4.fc17 Fedora-16: jabberd-2.2.14-4.fc16 Fedora EPEL 6: jabberd-2.2.14-4.el6 Fedora EPEL 5: jabberd-2.2.11-4.el5 This issue affects the versions of the jabberd package, as shipped with Red Hat Network Satellite Server 5.4 and with Red Hat Network Proxy Server 5.4. The CVE identifier of CVE-2012-3525 has been assigned to this issue: http://www.openwall.com/lists/oss-security/2012/08/22/6 jabberd-2.2.14-4.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report. jabberd-2.2.14-4.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report. jabberd-2.2.11-4.el5 has been pushed to the Fedora EPEL 5 stable repository. If problems still persist, please make note of it in this bug report. jabberd-2.2.14-4.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report. jabberd-2.2.17-1.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report. Statement: The Red Hat Security Response Team has rated this issue as having low security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/. This issue has been addressed in following products: Red Hat Network Proxy v 5.5 Via RHSA-2012:1539 https://rhn.redhat.com/errata/RHSA-2012-1539.html This issue has been addressed in following products: Red Hat Network Satellite Server v 5.5 Via RHSA-2012:1538 https://rhn.redhat.com/errata/RHSA-2012-1538.html |