pidgin 1:2.10.6-0ubuntu2.2 source package in Ubuntu

Changelog

pidgin (1:2.10.6-0ubuntu2.2) quantal-security; urgency=low

  * SECURITY UPDATE: file overwrite via MXit crafted pathname
    - debian/patches/CVE-2013-0271.patch: properly escape filenames in
      libpurple/protocols/mxit/formcmds.c,
      libpurple/protocols/mxit/splashscreen.c.
    - CVE-2013-0271
  * SECURITY UPDATE: arbitrary code execution via long HTTP header in MXit
    - debian/patches/CVE-2013-0272.patch: properly check lengths in
      libpurple/protocols/mxit/http.c.
    - CVE-2013-0272
  * SECURITY UPDATE: denial of service via long user ID in Sametime
    - debian/patches/CVE-2013-0273.patch: use g_strlcpy in
      libpurple/protocols/sametime/sametime.c.
    - CVE-2013-0273
  * SECURITY UPDATE: denial of service via long UPnP responses
    - debian/patches/CVE-2013-0274.patch: use g_strlcpy in libpurple/upnp.c.
    - CVE-2013-0274
 -- Marc Deslauriers <email address hidden>   Thu, 21 Feb 2013 12:48:49 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Quantal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
pidgin_2.10.6.orig.tar.bz2 9.5 MiB 3e25a633b97cbfa8326999a30282e7a662a9b9bbf2853be84af0b8fb60392c96
pidgin_2.10.6-0ubuntu2.2.debian.tar.gz 66.7 KiB 0bf5542c36d8a17bed89fd74a93904c5f908650a670b13c9184338160589d53e
pidgin_2.10.6-0ubuntu2.2.dsc 2.8 KiB c120464eee59900ae12a1915dab178292711c16273f251a5dfee169a25028229

View changes file

Binary packages built by this source

finch: No summary available for finch in ubuntu quantal.

No description available for finch in ubuntu quantal.

finch-dev: No summary available for finch-dev in ubuntu quantal.

No description available for finch-dev in ubuntu quantal.

libpurple-bin: No summary available for libpurple-bin in ubuntu quantal.

No description available for libpurple-bin in ubuntu quantal.

libpurple-dev: No summary available for libpurple-dev in ubuntu quantal.

No description available for libpurple-dev in ubuntu quantal.

libpurple0: No summary available for libpurple0 in ubuntu quantal.

No description available for libpurple0 in ubuntu quantal.

pidgin: No summary available for pidgin in ubuntu quantal.

No description available for pidgin in ubuntu quantal.

pidgin-data: No summary available for pidgin-data in ubuntu quantal.

No description available for pidgin-data in ubuntu quantal.

pidgin-dbg: No summary available for pidgin-dbg in ubuntu quantal.

No description available for pidgin-dbg in ubuntu quantal.

pidgin-dev: No summary available for pidgin-dev in ubuntu quantal.

No description available for pidgin-dev in ubuntu quantal.