slixmpp: Insufficient Certificate Validation A vulnerability has been discovered in slixmpp which can result in successful man-in-the-middle attacks. slixmpp 2023-05-03 2023-05-03 881181 remote 1.8.3 1.8.3

slixmpp is a Python 3 library for XMPP.

slixmpp does not validate hostnames in certificates used by connected servers.

An attacker could perform a man-in-the-middle attack on users' connections to servers with slixmpp.

There is no known workaround at this time.

All slixmpp users should upgrade to the latest version:

# emerge --sync # emerge --ask --upgrade --verbose ">=dev-python/slixmpp-1.8.3" CVE-2022-45197 ajak sam