Prosody

Today brings an important security release for both our stable branches. This fixes a cross-host authentication vulnerability, CVE-2018-10847. The issue affects Prosody instances that have multiple virtual hosts (including anonymous authenticated ... [More] hosts). All versions of Prosody before 0.9.14 and 0.10.2 are affected. A full security advisory is available at https://prosody.im/security/advisory_20180531 Changes Summary of all changes in this release: Security mod_c2s: Do not allow the stream ‘to’ to change across stream restarts (fixes #1147) Minor changes mod_websocket: Store the request object on the session for use by other modules (fixes #1153) mod_c2s: Avoid concatenating potential nil value (fixes #753) core. [Less]

We are pleased to announce a new minor release from our stable branch. This is the latest release to our stable branch. It is recommented that all 0.10.0 users upgrade, and users of our nightly packages upgrade to build 477 or later. A summary of changes in this release:

We are pleased to announce a new minor release from our stable branch. This is the latest release to our stable branch. It is recommented that all 0.10.0 users upgrade, and users of our nightly packages upgrade to build 477 or later. A summary of changes in this release:

This is a new maintenance release to our old stable 0.9 branch, with many bug fixes, including some important security improvements.

It’s not 1st April, it’s 2nd October. Which means the rumours you heard were true. Prosody 0.10.0 is released! This is the first release of our 0.10 branch. All of our recent releases have been from our stable 0.9 branch, which has served us well ... [More] since the initial release of 0.9.0 back in 2013. However time marches on, and we have a long list of new features and modules that we want to share with you. [Less]

We are pleased to announce a new minor release from our stable branch. This release fixes a few minor issues, and fixes valid certificates failing to verify correctly when Prosody 0.9.x is used with LuaSec 0.6. A summary of changes in this release: