File _patchinfo of Package patchinfo.6052
<patchinfo incident="6052">
<issue id="1014976" tracker="bnc">VUL-1: CVE-2016-9928: MCabber: remote attackers can modify the roster and intercept messages via a crafted roster-push IQ stanza</issue>
<issue id="2015-8688" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<packager>XRevan86</packager>
<description>
This update for mcabber fixes the following issues:
- Update to version 1.0.4 (changes since 1.0.2):
* Check the origin of roster pushes (boo#1014976, CVE-2015-8688 (Gajim),
https://gultsch.de/gajim_roster_push_and_message_interception.html)
* Link with the tinfo library.
* Fix default modules directory on OpenBSD.
* Create the history log directory if it doesn't exist.
* [OTR] Do not send empty subjects.
* [UI] /set does not display password values anymore.
* [MUC] Use nick to set the role.
* Misc help/documentation updates.
</description>
<summary>Security update for mcabber</summary>
</patchinfo>