-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 28 Jan 2016 10:28:24 +0300 Source: prosody Binary: prosody Architecture: source amd64 Version: 0.9.7-2+deb8u3 Distribution: jessie-security Urgency: high Maintainer: Matthew James Wild <mwild1@gmail.com> Changed-By: Sergei Golovan <sgolovan@debian.org> Description: prosody - Lightweight Jabber/XMPP server Changes: prosody (0.9.7-2+deb8u3) jessie-security; urgency=high . * CVE-2016-0756: insecure dialback key generation/validation algorithm * Fix for regression introduced in the previous CVE-2016-1232 fix: s2s doesn't work if /dev/urandom is read-only. Checksums-Sha1: 23673f5910392cc7325d20f885e08b6ae0fc4155 1988 prosody_0.9.7-2+deb8u3.dsc 8325dbc144889355e82d052e3fdc83665847ff37 15584 prosody_0.9.7-2+deb8u3.debian.tar.xz ad2ab0badb24d5b4dbb557797211ac1208ea80e9 203612 prosody_0.9.7-2+deb8u3_amd64.deb Checksums-Sha256: 7236c10cbc39149fc444c5186a2a7c5039d37720651f99ec8f065e60f4475898 1988 prosody_0.9.7-2+deb8u3.dsc 061b97fa602297790ebadc105adc5667c75d6bb49ad8494f18b556c1164b0f9f 15584 prosody_0.9.7-2+deb8u3.debian.tar.xz cd8333b6de7a1a090cd79d111127bbf7a2cf987fb13ab9c9afe5893fc406c71d 203612 prosody_0.9.7-2+deb8u3_amd64.deb Files: 80ebbf0e3a10a7c0ef20d42d16598658 1988 net extra prosody_0.9.7-2+deb8u3.dsc b7364f5920a4f5674659b668c946abbb 15584 net extra prosody_0.9.7-2+deb8u3.debian.tar.xz 49df4f20d9ef02a53b0e0046e9bd9908 203612 net extra prosody_0.9.7-2+deb8u3_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVqxkGFfnxjJPgTkdAQiXVw/9F6Nz1Abl2A7HTF3wkWXBiue0weLTH9fB ZW7RACTIKn/kTy4NWhyw6gcu/dGe3mpdaS1kwDltU2eT7+rdj7B5LN5GJzaxR5o5 wFvqS6yzNhUzXqyJsOnX6LqvXlSKrq52/6e7C5ilA3qLwOoHxMsNNoqAFTXMSCi7 Xr58g6Y8X2QzyPqxrkL6BKAEgkuJ/6SvtwxlM9hwTOku5hO3TLFofDUk/JJwmS2K J4aznR5e/5CbpjWXYkc/TgH6AMYb4m698jH1eQHpIq8t8g/mDh/k5qxgRVahsj5M yPJQlJQiO7Vqoi6Yin+MCWWVXAefau14dSk86E1QEvKdr+ABIxBXrknD7obUgC/4 HD7GueZQ92U+WGWk0OC8fdWwn7RnGXMkwef/wntYn+d6oc4ZMh0MarXpDatTHemY c0XUVvGTPqmwVXBkxVmIABMMzZuSxE74t8jsKJCMRSKP1pyja6HwseTXe1KejSF0 9UfrdogkqzBX+YgMGJB4QrutvYffCXS9xwLNGD2yeWsO2ynpSwt1NtrpEPNm9c0c iIX0xrdOEn3ps0Dr5U6KbpgaoFvLPBkB+wZmA+jf+GsmI3xA6Hcx82M9Ea7xyO2c oZ0yksK2yvFw711JRuSvfRdIzABSVbVbfKWwTDDJRykwE/WNPsLIMHn333rwoki2 aKqF5sS3H1Y= =166K -----END PGP SIGNATURE-----