Vulnerable: version is affected by 12 known vulnerabilities. See below.
wip/prosody NetBSD
Flexible communications server for Jabber/XMPP written in Lua
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- mit
- Categories
- wip, chat
Description
Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols.
List of supported XEPs: https://prosody.im/doc/xeplist
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | wip/prosody | |
| FreeBSD | net-im/prosody | 13.0.7 |
| OpenBSD | net/prosody | 13.0.7 |
| DragonFly | net-im/prosody | 0.12.5_1 |
| HardenedBSD | net-im/prosody | 13.0.7 |
| GhostBSD | net-im/prosody | 13.0.6 |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/prosody && make install clean
Dependencies
Run dependencies 9
No port depends on this one.
Known vulnerabilities 12
- prosody: denial-of-service
- prosody: multiple-vulnerabilities
- prosody: denial-of-service
- prosody: denial-of-service (CVE-2017-18265)
- prosody: security-bypass (CVE-2018-10847)
- prosody: access-bypass (CVE-2021-32917)
- prosody: remote-denial-of-service (CVE-2021-32918)
- prosody: improper-certificate-validation (CVE-2021-32919)
- prosody: denial-of-service (CVE-2021-32920)
- prosody: timing-attack (CVE-2021-32921)
- prosody: spoofing-attack
- prosody: denial-of-service