pidgin 1:2.5.5-1ubuntu8.5 source package in Ubuntu
Changelog
pidgin (1:2.5.5-1ubuntu8.5) jaunty-security; urgency=low
* SECURITY UPDATE: denial of service via TOPIC message
- debian/patches/79_security_CVE-2009-2703.patch: validate args in
libpurple/protocols/irc/msgs.c.
- CVE-2009-2703
* SECURITY UPDATE: information disclosure via incorrect jabber TLS
handling
- debian/patches/80_security_CVE-2009-3026.patch: bail out if
encryption is not available in libpurple/protocols/jabber/auth.c.
- CVE-2009-3026
* SECURITY UPDATE: denial of service via malformed SLP invite message
- debian/patches/81_security_CVE-2009-3083.patch: validate branch,
content_type and content in libpurple/protocols/msn/slp.c.
- CVE-2009-3083
* SECURITY UPDATE: denial of service via XHTML-IM content with cid: images
- debian/patches/82_security_CVE-2009-3085.patch: validate raw_data in
libpurple/protocols/jabber/data.c.
- CVE-2009-3085
* SECURITY UPDATE: denial of service via crafted contact list data
- debian/patches/83_security_CVE-2009-3615.patch: validate contact
list structure in libpurple/protocols/oscar/oscar.c.
- CVE-2009-3615
* SECURITY UPDATE: directory traversal via custom smiley request
(LP: #501089)
- debian/patches/84_security_CVE-2010-0013.patch: ignore request for
smileys that don't exist in the image store in
libpurple/protocols/msn/slp.c, backport purple_strequal in
libpurple/util.{c,h}.
- CVE-2010-0013
-- Marc Deslauriers <email address hidden> Thu, 14 Jan 2010 13:31:58 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Jaunty
- Original maintainer:
- Ubuntu Core Development Team
- Architectures:
- any
- Section:
- net
- Urgency:
- Low Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| pidgin_2.5.5.orig.tar.gz | 11.4 MiB | d71c11fc0826068fcc75e8dc716248fbcaba724bdd3f4613671871e3ddf150db |
| pidgin_2.5.5-1ubuntu8.5.diff.gz | 134.2 KiB | 65b8010d289cc1ca95f81572253c0f77ea7c58904108fcff6a35084d80983ac3 |
| pidgin_2.5.5-1ubuntu8.5.dsc | 1.9 KiB | 3773d4863057293c150147a5404e3aca4a9136a31c662dd56a00caecc7efef16 |
Available diffs
Binary packages built by this source
- finch: No summary available for finch in ubuntu jaunty.
No description available for finch in ubuntu jaunty.
- finch-dev: No summary available for finch-dev in ubuntu jaunty.
No description available for finch-dev in ubuntu jaunty.
- libpurple-bin: No summary available for libpurple-bin in ubuntu jaunty.
No description available for libpurple-bin in ubuntu jaunty.
- libpurple-dev: No summary available for libpurple-dev in ubuntu jaunty.
No description available for libpurple-dev in ubuntu jaunty.
- libpurple0: No summary available for libpurple0 in ubuntu jaunty.
No description available for libpurple0 in ubuntu jaunty.
- pidgin: No summary available for pidgin in ubuntu jaunty.
No description available for pidgin in ubuntu jaunty.
- pidgin-data: No summary available for pidgin-data in ubuntu jaunty.
No description available for pidgin-data in ubuntu jaunty.
- pidgin-dbg: No summary available for pidgin-dbg in ubuntu jaunty.
No description available for pidgin-dbg in ubuntu jaunty.
- pidgin-dev: No summary available for pidgin-dev in ubuntu jaunty.
No description available for pidgin-dev in ubuntu jaunty.
