pidgin (1:2.6.6-1ubuntu4.6) lucid-security; urgency=low
* SECURITY UPDATE: arbitrary code execution via long HTTP header in MXit
- debian/patches/CVE-2013-0272.patch: properly check lengths in
libpurple/protocols/mxit/http.c.
- CVE-2013-0272
* SECURITY UPDATE: denial of service via long user ID in Sametime
- debian/patches/CVE-2013-0273.patch: use g_strlcpy in
libpurple/protocols/sametime/sametime.c.
- CVE-2013-0273
* SECURITY UPDATE: denial of service via long UPnP responses
- debian/patches/CVE-2013-0274.patch: use g_strlcpy in libpurple/upnp.c.
- CVE-2013-0274
Date: 2013-02-21 18:50:11.754590+00:00
Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com>
Maintainer: Ubuntu Desktop <ubuntu-desk...@lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/pidgin/1:2.6.6-1ubuntu4.6
Sorry, changesfile not available.
--
Lucid-changes mailing list
Lucid-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/lucid-changes
