CVE-2012-2086

Published: 23 November 2012

SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter.

Priority

Status

Package	Release	Status
gajim Launchpad, Ubuntu, Debian	hardy	Ignored (end of life)
	lucid	Released (0.13-0ubuntu2.1)
	maverick	Ignored (end of life)
	natty	Released (0.13.4-3ubuntu2.1)
	oneiric	Released (0.14.1-1ubuntu1.1)
	precise	Released (0.15-1)
	upstream	Released (0.15-1)

References

https://www.cve.org/CVERecord?id=CVE-2012-2086
NVD
Launchpad
Debian

Bugs

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668038
https://trac.gajim.org/ticket/7034
https://bugs.launchpad.net/ubuntu/+source/gajim/+bug/984616

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›