0b95043495
This fixes a cross-host authentication vulnerability, CVE-2018-10847. The issue affects Prosody instances that have multiple virtual hosts (including anonymous authenticated hosts): https://blog.prosody.im/prosody-0-10-2-security-release A full security advisory is available at https://prosody.im/security/advisory_20180531 Compute hashes locally as they are no more available on https://prosody.im/downloads/source/{MD5,SHA1,SHA256,SHA512}SUMS Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
9 lines
515 B
Plaintext
9 lines
515 B
Plaintext
# Locally computed:
|
|
md5 4cb1ac0db2b739b933ded5038551d7c2 prosody-0.10.2.tar.gz
|
|
sha1 1d51e542475c3f3e712eace29537b042c941d6ab prosody-0.10.2.tar.gz
|
|
sha256 75b5f035e7a74d5f208eeeaf8419b94a85d09b40252d444cff8033fde3c9768e prosody-0.10.2.tar.gz
|
|
sha512 9fc05e34b45b0c16835ba94a73532fb3b4ee335f27d56bb9260e1b3e22614f89f44eb5d04b4e90d016db0b5bee6f5c7e7d099e1defb027e6823ee7667c1fe28f prosody-0.10.2.tar.gz
|
|
|
|
# Hash for license file:
|
|
sha256 bbbdc1c5426e5944cf869fc0faeaf19d88a220cd2b39ea98b7b8e86b0e88a2ef COPYING
|