Jabber Club Security Update: Protecting TLS Connections

We updated our ejabberd server image following the advisory about the compromised eMudhra intermediate certificate authority. The ProcessOne verification test returned the expected protection results.
We have applied a security update to the XMPP server serving jabber.club and xmpp.mx.
The update follows ProcessOne’s advisory on the eMudhra intermediate CA compromise. The issue affects TLS certificate trust validation, including connections between XMPP servers.
What we changed
- Rebuilt our server image using the patched official ejabberd 26.09.1 container image.
- Preserved the server configuration and user data.
- Ran the verification test recommended by ProcessOne on the running server.
The test returned:
fast_tls status: ok, ssl status: ok
Both checks returned the expected results, confirming protection against the reported issue within the scope of the vendor’s test.
The 26.09.1 version identifies the updated container image and its trusted certificate bundle. The ejabberd application itself remains at version 26.09.
No action is required from jabber.club or xmpp.mx users. Server addresses, accounts, and connection settings remain unchanged.
Read more: the official ProcessOne advisory and recommendations.

If you experience any connection issues or problems with your XMPP client following the update, please contact the administration:

💬 Jabber: admin@jabber.club
💬 MUC: xmpp:welcome@muc.jabber.club?join

Thank you for using our server! We remain committed to keeping your communication fast, reliable, and private. 💚

💚 Enjoying our server? You can support its operation and continued development with a voluntary donation:
🔗 https://jabber.club/donate