https://bugzilla.redhat.com/show_bug.cgi?id=2130196
Bug ID: 2130196
Summary: CVE-2022-39835 gajim: security issue
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: trathi(a)redhat.com
CC: epel-packagers-sig(a)lists.fedoraproject.org,
lemenkov(a)gmail.com, mschmidt(a)redhat.com,
redhat-bugzilla(a)linuxnetz.de, suraia(a)ikkoku.de
Target Milestone: ---
Classification: Other
A vulnerability was found in Gajim which allowed attackers to craft a XML
stanza in a way, so Gajim would accept it as message correction for messages
not originating from the attacker.
https://bugzilla.redhat.com/show_bug.cgi?id=2128097
https://bugzilla.redhat.com/show_bug.cgi?id=2122047
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2130196