ubuntu/+source/pidgin:applied/ubuntu/intrepid-proposed

Last commit made on 2009-11-30
Get this branch:
git clone -b applied/ubuntu/intrepid-proposed https://git.launchpad.net/ubuntu/+source/pidgin
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/intrepid-proposed
Repository:
lp:ubuntu/+source/pidgin

Recent commits

476a668... by Philip Wyett on 2009-11-30

Import patches-applied version 1:2.5.2-0ubuntu1.5 to applied/ubuntu/intrepid-proposed

Imported using git-ubuntu import.

Changelog parent: c00921423bc24de7f391c04e45b0ee20eadb1928
Unapplied parent: 983d8dcbbd44fbafe3a8bfe45d83e1cb564cd335

New changelog entries:
  * Add 87_yahoo_15_fix.patch: Backport upstream changes to use version 16 of
    the Yahoo! Messenger Protocol. The old authentication mechanism was
    disabled, meaning that it can no longer be used for signing in to Yahoo!
    services (LP: #389322)

983d8dc... by Philip Wyett on 2009-11-30

Import patches-unapplied version 1:2.5.2-0ubuntu1.5 to ubuntu/intrepid-proposed

Imported using git-ubuntu import.

Changelog parent: e13ca73c96c5e855501fd4a1a01348a0ddc56d96

New changelog entries:
  * Add 87_yahoo_15_fix.patch: Backport upstream changes to use version 16 of
    the Yahoo! Messenger Protocol. The old authentication mechanism was
    disabled, meaning that it can no longer be used for signing in to Yahoo!
    services (LP: #389322)

c009214... by Marc Deslauriers on 2009-08-19

Import patches-applied version 1:2.5.2-0ubuntu1.4 to applied/ubuntu/intrepid-security

Imported using git-ubuntu import.

Changelog parent: 21619fc70fe380e625ff72203b70b42935590dca
Unapplied parent: e13ca73c96c5e855501fd4a1a01348a0ddc56d96

New changelog entries:
  * SECURITY UPDATE: arbitrary code execution via crafted MSNSLP packet
    (LP: #415863)
    - debian/patches/86_security_CVE-2009-2694.patch: properly destroy
      slpmsg in libpurple/protocols/{msn,msnp9}/slplink.c.
    - CVE-2009-2694

e13ca73... by Marc Deslauriers on 2009-08-19

Import patches-unapplied version 1:2.5.2-0ubuntu1.4 to ubuntu/intrepid-security

Imported using git-ubuntu import.

Changelog parent: 19fb074622575ed6a0ca7ad73a13e6a171025d3f

New changelog entries:
  * SECURITY UPDATE: arbitrary code execution via crafted MSNSLP packet
    (LP: #415863)
    - debian/patches/86_security_CVE-2009-2694.patch: properly destroy
      slpmsg in libpurple/protocols/{msn,msnp9}/slplink.c.
    - CVE-2009-2694

21619fc... by Marc Deslauriers on 2009-07-03

Import patches-applied version 1:2.5.2-0ubuntu1.3 to applied/ubuntu/intrepid-security

Imported using git-ubuntu import.

Changelog parent: 4b32c1bc7e2c16fb7733b46f252867bb9c429eb4
Unapplied parent: 19fb074622575ed6a0ca7ad73a13e6a171025d3f

New changelog entries:
  * SECURITY UPDATE: denial of service via ICQWebMessage message type in
    OSCAR protocol. (LP: #393736)
    - debian/patches/85_security_CVE-2009-1889.patch: make the check better
      in libpurple/protocols/oscar/oscar.c, only allocate memory if len is
      valid in libpurple/protocols/oscar/bstream.c.
    - CVE-2009-1889

19fb074... by Marc Deslauriers on 2009-07-03

Import patches-unapplied version 1:2.5.2-0ubuntu1.3 to ubuntu/intrepid-security

Imported using git-ubuntu import.

Changelog parent: 9b1be1b6785b61ee0f57f03685435851104b2ce7

New changelog entries:
  * SECURITY UPDATE: denial of service via ICQWebMessage message type in
    OSCAR protocol. (LP: #393736)
    - debian/patches/85_security_CVE-2009-1889.patch: make the check better
      in libpurple/protocols/oscar/oscar.c, only allocate memory if len is
      valid in libpurple/protocols/oscar/bstream.c.
    - CVE-2009-1889

4b32c1b... by Marc Deslauriers on 2009-05-25

Import patches-applied version 1:2.5.2-0ubuntu1.2 to applied/ubuntu/intrepid-security

Imported using git-ubuntu import.

Changelog parent: 9496956f1670ea8c8973909809f8a89a302ae4a8
Unapplied parent: 9b1be1b6785b61ee0f57f03685435851104b2ce7

New changelog entries:
  * SECURITY UPDATE: denial of service or possible code execution in XMPP
    file transfer
    - debian/patches/81_security_CVE-2009-1373.patch: calculate lengths
      correctly in libpurple/protocols/jabber/si.c.
    - CVE-2009-1373
  * SECURITY UPDATE: denial of service in the QQ protocol decryption
    handler
    - debian/patches/82_security_CVE-2009-1374.patch: make sure count64
      hasn't reached zero in libpurple/protocols/qq/qq_crypt.c.
    - CVE-2009-1374
  * SECURITY UPDATE: denial of service in PurpleCircBuffer object expansion
    - debian/patches/83_security_CVE-2009-1375.patch: add an additional
      check in libpurple/circbuffer.c.
    - CVE-2009-1375
  * SECURITY UPDATE: arbitrary code execution via crafted MSN message
    - debian/patches/84_security_CVE-2009-1376.patch: switch offset
      variable to guint64 in libpurple/protocols/msn/slplink.c.
    - CVE-2009-1376

9b1be1b... by Marc Deslauriers on 2009-05-25

Import patches-unapplied version 1:2.5.2-0ubuntu1.2 to ubuntu/intrepid-security

Imported using git-ubuntu import.

Changelog parent: dbdd606eb6704d0f31a3b63e72f4198d0952a283

New changelog entries:
  * SECURITY UPDATE: denial of service or possible code execution in XMPP
    file transfer
    - debian/patches/81_security_CVE-2009-1373.patch: calculate lengths
      correctly in libpurple/protocols/jabber/si.c.
    - CVE-2009-1373
  * SECURITY UPDATE: denial of service in the QQ protocol decryption
    handler
    - debian/patches/82_security_CVE-2009-1374.patch: make sure count64
      hasn't reached zero in libpurple/protocols/qq/qq_crypt.c.
    - CVE-2009-1374
  * SECURITY UPDATE: denial of service in PurpleCircBuffer object expansion
    - debian/patches/83_security_CVE-2009-1375.patch: add an additional
      check in libpurple/circbuffer.c.
    - CVE-2009-1375
  * SECURITY UPDATE: arbitrary code execution via crafted MSN message
    - debian/patches/84_security_CVE-2009-1376.patch: switch offset
      variable to guint64 in libpurple/protocols/msn/slplink.c.
    - CVE-2009-1376

9496956... by Didier Roche on 2009-03-10

Import patches-applied version 1:2.5.2-0ubuntu1.1 to applied/ubuntu/intrepid-proposed

Imported using git-ubuntu import.

Changelog parent: 11387effa18063caca8c4eb43fc731ff8ebed503
Unapplied parent: dbdd606eb6704d0f31a3b63e72f4198d0952a283

New changelog entries:
  * Apply patch upstream to fix connexion issue with new ICQ
    protocol: debian/patches/80_fix_ICQ_new_protocol.patch (LP: #340151)

dbdd606... by Didier Roche on 2009-03-10

Import patches-unapplied version 1:2.5.2-0ubuntu1.1 to ubuntu/intrepid-proposed

Imported using git-ubuntu import.

Changelog parent: a9300a8067792030cedbb6ebcaa2683afb57d59a

New changelog entries:
  * Apply patch upstream to fix connexion issue with new ICQ
    protocol: debian/patches/80_fix_ICQ_new_protocol.patch (LP: #340151)