[ANN] slixmpp 1.4.2 released

Emmanuel Gil Peyrot <[email protected]> Thu, 31 Jan 2019 16:09:54 +0100

Newsgroups	gmane.network.jabber.devel
Message-ID	<20190131150954.GB6764@luna>

Hello,

We are pleased to announce the 1.4.2 release of slixmpp!
https://lab.louiz.org/poezio/slixmpp/tags/slix-1.4.2

It is a bugfix release, mainly fixing performance and security issues,
here is the changelog:
- Do not do channel binding without TLS.
- Add default timeout of 120s for IQs to prevent slowdowns over
  long-running sessions.
- Fix CVE-2019-1000021: make the XEP-0223 plugin actually make the node
  private.
- Do not query vcard avatars unconditionnally, to improve startup time
  of clients.
- Fix GSSAPI (thanks Jelmer Vernooĳ!)

Note that the current upstream is now available on louiz’ GitLab:
https://lab.louiz.org/poezio/slixmpp

-- 
The slixmpp authors

_______________________________________________
JDev mailing list
Info: https://mail.jabber.org/mailman/listinfo/jdev
Unsubscribe: [email protected]
_______________________________________________

signature.asc (application/pgp-signature, 488 B)