[OpenSIPS-Devel] [OpenSIPS/opensips] 3d3a59: jabber: bound conference presence address

[Răzvan Crainea]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 3d3a59db4a9edc19a8ec5820e90770ded09265e9
      https://github.com/OpenSIPS/opensips/commit/3d3a59db4a9edc19a8ec5820e90770ded09265e9
  Author: Razvan Crainea <razvan at opensips.org>
  Date:   2026-09-17 (Thu, 17 Sep 2026)

  Changed paths:
    M modules/jabber/xjab_jcon.c

  Log Message:
  -----------
  jabber: bound conference presence address

Reject conference addresses whose room, server, and nick exceed the presence buffer before copying them.

Fixes GHSA-7xv8-ff5m-99ww: https://github.com/OpenSIPS/opensips/security/advisories/GHSA-7xv8-ff5m-99ww

Thanks to @kta1kri for reporting this issue.



To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications