Prosody Multiple Vulnerabilities Fixed by 0.9.9 and 0.10 build 196
Description
(#Several vulnerabilities have been identified in prosody:#- CVE-2016-1231: path traversal. A remote attacker could exploit it to read files outside of the configured public root directory. This vulnerability is located in the "mod_http_files" module#- CVE-2016-1232: weak encryption. A remote attacker in a man-in-the-middle position could exploit it to guess the private key of a server-to-server communication to intercept and modify sensitive data. This vulnerability is located in the "mod_dialback" module.##The prosody packages provided by Debian Squeeze 6 are vulnerable (CVE-2016-1232).)
