To: [email protected]Subject: [ MDVSA-2008:143 ] - Updated pidgin packages fix MSN protocol handler vulnerability
Date: Thu, 10 Jul 2008 20:47:00 -0600
From: [email protected]
Reply-To: <xsecurity@mandriva.com.>
Message-Id: <E1KH8ey-0006xF-NX@titan.mandriva.com.>
X-Virus-Scanned: antivirus-gw at tyumen.ru
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2008:143
http://www.mandriva.com/security/
_______________________________________________________________________
Package : pidgin
Date : July 10, 2008
Affected: 2008.0, 2008.1
_______________________________________________________________________
Problem Description:
An integer overflow flaw was found in Pidgin's MSN protocol handler
that could allow for the execution of arbitrary code if a user received
a malicious MSN message (CVE-2008-2927).
In addition, this update provides the ability to use ICQ networks
again on Mandriva Linux 2008.0, as in MDVA-2008:103 (updated pidgin
for 2008.1).
The updated packages have been patched to correct this issue.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2927
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2008.0:
509b0087973fa73ce677f3df84533ea5 2008.0/i586/finch-2.2.1-2.1mdv2008.0.i586.rpm
587ee9d2853cfcc848c8a133b90c112d 2008.0/i586/libfinch0-2.2.1-2.1mdv2008.0.i586.rpm
55b077915a8fe399bf24817bbd06c204 2008.0/i586/libpurple0-2.2.1-2.1mdv2008.0.i586.rpm
eda90e586e160243de149c01bf60922e 2008.0/i586/libpurple-devel-2.2.1-2.1mdv2008.0.i586.rpm
64e11e5aafa3bae3261579e52ff61102 2008.0/i586/pidgin-2.2.1-2.1mdv2008.0.i586.rpm
b616662d66460eefa94e67773f63679d 2008.0/i586/pidgin-bonjour-2.2.1-2.1mdv2008.0.i586.rpm
0a40b9f6e0ebd896bc5cadf9c941c0aa 2008.0/i586/pidgin-client-2.2.1-2.1mdv2008.0.i586.rpm
0ec01e1a48745a5c712cd6461096793c 2008.0/i586/pidgin-facebook-2.2.1-2.1mdv2008.0.i586.rpm
3d35a41a95190a645d23942e50c0d836 2008.0/i586/pidgin-gevolution-2.2.1-2.1mdv2008.0.i586.rpm
08d55606cdc47a373a2f00d96384798f 2008.0/i586/pidgin-i18n-2.2.1-2.1mdv2008.0.i586.rpm
507385fff430c937cdae2b905fef68f9 2008.0/i586/pidgin-meanwhile-2.2.1-2.1mdv2008.0.i586.rpm
0b16d9e4d7e45d5693545dc91117524e 2008.0/i586/pidgin-mono-2.2.1-2.1mdv2008.0.i586.rpm
3dd2f3b6715406f6d49c89361f494063 2008.0/i586/pidgin-perl-2.2.1-2.1mdv2008.0.i586.rpm
ae910793ab236990d8918552f49f7ae9 2008.0/i586/pidgin-silc-2.2.1-2.1mdv2008.0.i586.rpm
5d025e8085e9dac3cfac0fa8eb29c561 2008.0/i586/pidgin-tcl-2.2.1-2.1mdv2008.0.i586.rpm
e36f85784a84514af05b6cd4a2355a87 2008.0/SRPMS/pidgin-2.2.1-2.1mdv2008.0.src.rpm
Mandriva Linux 2008.0/X86_64:
e2f11fa982f7d51a45770c7032be086e 2008.0/x86_64/finch-2.2.1-2.1mdv2008.0.x86_64.rpm
2cd2bd84268ba18d2ee6c493ed3bfbd1 2008.0/x86_64/lib64finch0-2.2.1-2.1mdv2008.0.x86_64.rpm
55e3d0067ef6ab5b6bd4acfce578a6d8 2008.0/x86_64/lib64purple0-2.2.1-2.1mdv2008.0.x86_64.rpm
98c5f4f751041662eef46be53a331b3a 2008.0/x86_64/lib64purple-devel-2.2.1-2.1mdv2008.0.x86_64.rpm
9a2f1a20abcd75a6bca90a4fcbf73e44 2008.0/x86_64/pidgin-2.2.1-2.1mdv2008.0.x86_64.rpm
6afdf79793b66b0ea59cdeb57f65011e 2008.0/x86_64/pidgin-bonjour-2.2.1-2.1mdv2008.0.x86_64.rpm
950bb83e3232d522be12bd09a618d9e3 2008.0/x86_64/pidgin-client-2.2.1-2.1mdv2008.0.x86_64.rpm
cafa5a63cfe7b3da268c4d667614f5bb 2008.0/x86_64/pidgin-facebook-2.2.1-2.1mdv2008.0.x86_64.rpm
e29a3161a12b981e105e354cfc901c9c 2008.0/x86_64/pidgin-gevolution-2.2.1-2.1mdv2008.0.x86_64.rpm
af56fd50efa80cc9601672b3b8953248 2008.0/x86_64/pidgin-i18n-2.2.1-2.1mdv2008.0.x86_64.rpm
013b49fdc2961a376fdee9dcfb2f6eb7 2008.0/x86_64/pidgin-meanwhile-2.2.1-2.1mdv2008.0.x86_64.rpm
3e04e61ccda3ee5522ec6f762b9aaaee 2008.0/x86_64/pidgin-mono-2.2.1-2.1mdv2008.0.x86_64.rpm
89a96f61d4e9baeb29eb543720a6b2dd 2008.0/x86_64/pidgin-perl-2.2.1-2.1mdv2008.0.x86_64.rpm
8ed2fe28fc433d1955e84815e7fe6bfc 2008.0/x86_64/pidgin-silc-2.2.1-2.1mdv2008.0.x86_64.rpm
5bca0408021ba9ed219cccb00b50553d 2008.0/x86_64/pidgin-tcl-2.2.1-2.1mdv2008.0.x86_64.rpm
e36f85784a84514af05b6cd4a2355a87 2008.0/SRPMS/pidgin-2.2.1-2.1mdv2008.0.src.rpm
Mandriva Linux 2008.1:
a0a2b96d3c2e07f7c8ade41b14356da4 2008.1/i586/finch-2.4.1-2.2mdv2008.1.i586.rpm
a651dd51073999681404e9d4f9911e40 2008.1/i586/libfinch0-2.4.1-2.2mdv2008.1.i586.rpm
86d8f6679e31ac72c9d8b1cf6c6abe23 2008.1/i586/libpurple0-2.4.1-2.2mdv2008.1.i586.rpm
8c030456211c723164c6cfa3cf27bc00 2008.1/i586/libpurple-devel-2.4.1-2.2mdv2008.1.i586.rpm
165ae136a6801c8e3b152cf131689e58 2008.1/i586/pidgin-2.4.1-2.2mdv2008.1.i586.rpm
bcac01478d3bf6e27e3a2d93c5ac48d7 2008.1/i586/pidgin-bonjour-2.4.1-2.2mdv2008.1.i586.rpm
9a52067105cb7b43f0aa373dc52bef3e 2008.1/i586/pidgin-client-2.4.1-2.2mdv2008.1.i586.rpm
fe5771389c06733b5b8cf2aa2bc67db0 2008.1/i586/pidgin-gevolution-2.4.1-2.2mdv2008.1.i586.rpm
953152aea997453e835a7abb4c9c77df 2008.1/i586/pidgin-i18n-2.4.1-2.2mdv2008.1.i586.rpm
b9fed85e3fdbb7fdec2e54bfdd34c9e3 2008.1/i586/pidgin-meanwhile-2.4.1-2.2mdv2008.1.i586.rpm
91b42d2b70c9136c4be3b74258dbab87 2008.1/i586/pidgin-mono-2.4.1-2.2mdv2008.1.i586.rpm
24a94402a42079c6c6d69d9d16b523ca 2008.1/i586/pidgin-perl-2.4.1-2.2mdv2008.1.i586.rpm
9daeb10a70822bbfdba6a168bb08344d 2008.1/i586/pidgin-silc-2.4.1-2.2mdv2008.1.i586.rpm
2c3c4832a7f491b81a64404d17e01070 2008.1/i586/pidgin-tcl-2.4.1-2.2mdv2008.1.i586.rpm
61d05852f634d5d509b00d40e25bed19 2008.1/SRPMS/pidgin-2.4.1-2.2mdv2008.1.src.rpm
Mandriva Linux 2008.1/X86_64:
0c285ec7f81a08d3ebb368abe16fbb8f 2008.1/x86_64/finch-2.4.1-2.2mdv2008.1.x86_64.rpm
f9116830b3d96d1014fdcc0a70d4567a 2008.1/x86_64/lib64finch0-2.4.1-2.2mdv2008.1.x86_64.rpm
464b0531188b3a5fb70441764208f9f2 2008.1/x86_64/lib64purple0-2.4.1-2.2mdv2008.1.x86_64.rpm
6198756941ef340dc23b07b6b342cb50 2008.1/x86_64/lib64purple-devel-2.4.1-2.2mdv2008.1.x86_64.rpm
cb2588ca2ddaf94aa808ab5041e24c77 2008.1/x86_64/pidgin-2.4.1-2.2mdv2008.1.x86_64.rpm
b0c515b5d144076575c34a461ae51d65 2008.1/x86_64/pidgin-bonjour-2.4.1-2.2mdv2008.1.x86_64.rpm
9b1dee6aeb0ea58d6af015c9bc3dce1b 2008.1/x86_64/pidgin-client-2.4.1-2.2mdv2008.1.x86_64.rpm
5b5bb13dcd6e4010ff9ba2f8eb0fe999 2008.1/x86_64/pidgin-gevolution-2.4.1-2.2mdv2008.1.x86_64.rpm
d40b42b60eb624155661a92b2e9ce421 2008.1/x86_64/pidgin-i18n-2.4.1-2.2mdv2008.1.x86_64.rpm
dba89ed53c87388ab386622445585094 2008.1/x86_64/pidgin-meanwhile-2.4.1-2.2mdv2008.1.x86_64.rpm
5004f75616437e7568df52c535957ab7 2008.1/x86_64/pidgin-mono-2.4.1-2.2mdv2008.1.x86_64.rpm
e7b4f4b7572fbf0a97a7357381c963df 2008.1/x86_64/pidgin-perl-2.4.1-2.2mdv2008.1.x86_64.rpm
4eb4a4e308b6d944d568265c762595c6 2008.1/x86_64/pidgin-silc-2.4.1-2.2mdv2008.1.x86_64.rpm
ec0ca5b5956d983f705780610dee4f06 2008.1/x86_64/pidgin-tcl-2.4.1-2.2mdv2008.1.x86_64.rpm
61d05852f634d5d509b00d40e25bed19 2008.1/SRPMS/pidgin-2.4.1-2.2mdv2008.1.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFIdp8PmqjQ0CJFipgRAtvpAJ49ShN9VRjdghv5P/0ClFJZ/4HeKACgmKDu
RnnwTwhqG7EveiZ0caFGG3g=
=kzVv
-----END PGP SIGNATURE-----
