Dear subscribers,
We are pleased to announce the release of aioxmpp 0.10.1. The current release
can be obtained from GitHub [1] (check out the v0.10.1 tag) or PyPI [2]. The
HTML documentation can be found at [3]. Examples can be found in the GitHub
repository, in the examples sub directory.
aioxmpp is a Python library based on asyncio. It implements the client side of
the XMPP protocol (RFC 6120 and others). For a more detailed description of
the package, please review the README of the package on GitHub [1] or on PyPI
[2]. For more information on XMPP, please see [8]. aioxmpp is licensed under
the terms of the GNU Lesser General Public License Version 3.0 or later.
Version 0.10.1 is a bugfix release with possible security implications.
It was discovered that two types of specifically crafted (invalid) IQ stanzas
could make aioxmpp 0.10.0 disconnect, leading to a Denial-of-Service type
effect. We decided to push a release quickly to fix this issue. Thanks to
Martin for discovering and reporting the issue.
Bugs, feature requests, patches and questions can be directed to either the
aioxmpp mailing list [4], the GitHub issue tracker [5] or the XMPP Multi-User
chat [6], whatever floats your boat. Please direct security-relevant issue
reports directly to me (jonas(a)wielicki.name), preferably encrypted using my
GPG public key [7].
kind regards,
Jonas
[1]: https://github.com/horazont/aioxmpp
[2]: https://pypi.python.org/pypi/aioxmpp
[3]: https://docs.zombofant.net/aioxmpp/0.10/
[4]: https://lists.zombofant.net/mailman/listinfo/aioxmpp-devel
[5]: https://github.com/horazont/aioxmpp/issues
[6]: aioxmpp(a)conference.zombofant.net
[7]: https://sks-keyservers.net/pks/lookup?op=get&search=0xE5EDE5AC679E300F
AA5A 78FF 508D 8CF4 F355 F682 E5ED E5AC 679E 300F
[8]: https://xmpp.org/
