I'm attaching a debdiff for precise but lucid - oneiric have the exact same 
package version.
I have checked (with -Werror=format-security) that there are no other format 
string issues

pidgin-otr (3.2.0-5ubuntu0.12.04.1) precise; urgency=low

  * SECURITY UPDATE: format string vulnerability (LP: #1000363)
    - otr-plugin.c: patch from upstream
    - CVE-2012-2369

 -- Felix Geyer <de...@ubuntu.com>  Wed, 16 May 2012 20:59:11 +0200


** Patch added: "pidgin-otr_3.2.0-5ubuntu0.12.04.1.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/pidgin-otr/+bug/1000363/+attachment/3149540/+files/pidgin-otr_3.2.0-5ubuntu0.12.04.1.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1000363

Title:
  CVE-2012-2369: Format string security vulnerability

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pidgin-otr/+bug/1000363/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to