MGASA-2017-0049

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2017-0049.html
Import Source
https://advisories.mageia.org/MGASA-2017-0049.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2017-0049
Related
Published
2017-02-18T16:29:09Z
Modified
2017-02-18T16:17:57Z
Summary
Updated jitsi packages fix security vulnerability
Details

An incorrect implementation of XEP-0280: Message Carbons in Jitsi and other XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks (CVE-2017-5603).

References
Credits

Affected packages

Mageia:5 / jitsi

Package

Name
jitsi
Purl
pkg:rpm/mageia/jitsi?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6-1.1.mga5

Ecosystem specific 

{
    "section": "core"
}