| Name | CVE-2016-10376 |
| Description | Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-967-1, DSA-3943-1 |
| Debian Bugs | 863445 |
The table below lists information on source packages.
The information below is based on the following data on fixed versions.