Dear subscribers,

We are pleased to announce the release of aioxmpp 0.10.1. The current release can be obtained from GitHub [1] (check out the v0.10.1 tag) or PyPI [2]. The HTML documentation can be found at [3]. Examples can be found in the GitHub repository, in the examples sub directory.

aioxmpp is a Python library based on asyncio. It implements the client side of the XMPP protocol (RFC 6120 and others). For a more detailed description of the package, please review the README of the package on GitHub [1] or on PyPI [2]. For more information on XMPP, please see [8]. aioxmpp is licensed under the terms of the GNU Lesser General Public License Version 3.0 or later.

Version 0.10.1 is a bugfix release with possible security implications.

It was discovered that two types of specifically crafted (invalid) IQ stanzas could make aioxmpp 0.10.0 disconnect, leading to a Denial-of-Service type effect. We decided to push a release quickly to fix this issue. Thanks to Martin for discovering and reporting the issue.

Bugs, feature requests, patches and questions can be directed to either the aioxmpp mailing list [4], the GitHub issue tracker [5] or the XMPP Multi-User chat [6], whatever floats your boat. Please direct security-relevant issue reports directly to me (jonas@wielicki.name), preferably encrypted using my GPG public key [7].

kind regards, Jonas

[1]: https://github.com/horazont/aioxmpp [2]: https://pypi.python.org/pypi/aioxmpp [3]: https://docs.zombofant.net/aioxmpp/0.10/ [4]: https://lists.zombofant.net/mailman/listinfo/aioxmpp-devel [5]: https://github.com/horazont/aioxmpp/issues [6]: aioxmpp@conference.zombofant.net [7]: https://sks-keyservers.net/pks/lookup?op=get&search=0xE5EDE5AC679E300F AA5A 78FF 508D 8CF4 F355 F682 E5ED E5AC 679E 300F [8]: https://xmpp.org/