[jdev] [ANN] aioxmpp 0.10.1 released

Jonas Wielicki jonas at wielicki.name
Sat Aug 11 14:29:45 UTC 2018


Dear subscribers,

We are pleased to announce the release of aioxmpp 0.10.1. The current release 
can be obtained from GitHub [1] (check out the v0.10.1 tag) or PyPI [2]. The  
HTML documentation can be found at [3]. Examples can be found in the GitHub  
repository, in the examples sub directory.

aioxmpp is a Python library based on asyncio. It implements the client side of  
the XMPP protocol (RFC 6120 and others). For a more detailed description of  
the package, please review the README of the package on GitHub [1] or on PyPI 
[2]. For more information on XMPP, please see [8]. aioxmpp is licensed under  
the terms of the GNU Lesser General Public License Version 3.0 or later.


Version 0.10.1 is a bugfix release with possible security implications. 

It was discovered that two types of specifically crafted (invalid) IQ stanzas 
could make aioxmpp 0.10.0 disconnect, leading to a Denial-of-Service type 
effect. We decided to push a release quickly to fix this issue. Thanks to 
Martin for discovering and reporting the issue.


Bugs, feature requests, patches and questions can be directed to either the 
aioxmpp mailing list [4], the GitHub issue tracker [5] or the XMPP Multi-User 
chat [6], whatever floats your boat. Please direct security-relevant issue 
reports directly to me (jonas at wielicki.name), preferably encrypted using my 
GPG public key [7].

kind regards,
Jonas

   [1]: https://github.com/horazont/aioxmpp
   [2]: https://pypi.python.org/pypi/aioxmpp
   [3]: https://docs.zombofant.net/aioxmpp/0.10/
   [4]: https://lists.zombofant.net/mailman/listinfo/aioxmpp-devel
   [5]: https://github.com/horazont/aioxmpp/issues
   [6]: aioxmpp at conference.zombofant.net
   [7]: https://sks-keyservers.net/pks/lookup?op=get&search=0xE5EDE5AC679E300F
        AA5A 78FF 508D 8CF4 F355  F682 E5ED E5AC 679E 300F
   [8]: https://xmpp.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.jabber.org/pipermail/jdev/attachments/20180811/ce042996/attachment.sig>


More information about the JDev mailing list