CVE:CVE-2021-32919
CNNVD:CNNVD-202105-839
Prosodical Thoughts Prosody是Prosodical Thoughts开源的一个应用系统。一个现代XMPP通信服务器。
Prosody 0.11.9版本之前存在信任管理问题漏洞。该漏洞源于程序不能正确地验证远程服务器证书。
solution:Upgrade prosody prosody to a higher version than 0.11.9,and avoid the version [0.10.0,0.11.9); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34