[prev in list] [next in list] [prev in thread] [next in thread] 

List:       jabber-jdev
Subject:    [jdev] [ANN] slixmpp 1.4.2 released
From:       Emmanuel Gil Peyrot <linkmauve () linkmauve ! fr>
Date:       2019-01-31 15:09:54
Message-ID: 20190131150954.GB6764 () luna
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


Hello,

We are pleased to announce the 1.4.2 release of slixmpp!
https://lab.louiz.org/poezio/slixmpp/tags/slix-1.4.2

It is a bugfix release, mainly fixing performance and security issues,
here is the changelog:
- Do not do channel binding without TLS.
- Add default timeout of 120s for IQs to prevent slowdowns over
  long-running sessions.
- Fix CVE-2019-1000021: make the XEP-0223 plugin actually make the node
  private.
- Do not query vcard avatars unconditionnally, to improve startup time
  of clients.
- Fix GSSAPI (thanks Jelmer Vernooij!)

Note that the current upstream is now available on louiz' GitLab:
https://lab.louiz.org/poezio/slixmpp

-- 
The slixmpp authors

["signature.asc" (application/pgp-signature)]

_______________________________________________
JDev mailing list
Info: https://mail.jabber.org/mailman/listinfo/jdev
Unsubscribe: JDev-unsubscribe@jabber.org
_______________________________________________


[prev in list] [next in list] [prev in thread] [next in thread]