| Package | Affected versions | Patched versions |
|---|---|---|
| telepathy gabble | = 0.16.0= 0.16.1= 0.16.2= 0.16.3= 0.16.4= 0.17.0= 0.17.1= 0.17.2= 0.17.3≤ 0.16.5 |
The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free