Unscored DSA-2895-1 2 CVEs

prosody - security update

Published Apr 6, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	prosody	0.8.2-4+deb7u1

Vulnerabilities 2

Unscored —

CVE-2014-2744

plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream comp…

prosody lua-expat Debian

Apr 11, 2014
Unscored —

CVE-2014-2745

Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows remote attacker…

prosody Debian

Apr 11, 2014