I'm attaching a debdiff for precise but lucid - oneiric have the exact same package version. I have checked (with -Werror=format-security) that there are no other format string issues
pidgin-otr (3.2.0-5ubuntu0.12.04.1) precise; urgency=low * SECURITY UPDATE: format string vulnerability (LP: #1000363) - otr-plugin.c: patch from upstream - CVE-2012-2369 -- Felix Geyer <de...@ubuntu.com> Wed, 16 May 2012 20:59:11 +0200 ** Patch added: "pidgin-otr_3.2.0-5ubuntu0.12.04.1.debdiff" https://bugs.launchpad.net/ubuntu/+source/pidgin-otr/+bug/1000363/+attachment/3149540/+files/pidgin-otr_3.2.0-5ubuntu0.12.04.1.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1000363 Title: CVE-2012-2369: Format string security vulnerability To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pidgin-otr/+bug/1000363/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs