Gentoo Linux Security Advisory GLSA 200804-26 - Openfire's connection manager in the file ConnectionManagerImpl.java cannot handle clients that fail to read messages, and has no limit on their session's send buffer. Versions less than 3.5.0 are affected.
9a173c75bcff99a26196d7432b49d5f697e8e5a626c7c27b72c52d13592aae9d