Format: 1.8 Date: Fri, 18 Nov 2011 14:40:50 -0500 Source: pidgin Binary: libpurple0 pidgin pidgin-data pidgin-dev pidgin-dbg finch finch-dev libpurple-dev libpurple-bin Architecture: all i386_translations i386 Version: 1:2.7.3-1ubuntu3.3 Distribution: maverick Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: finch - text-based multi-protocol instant messaging client finch-dev - text-based multi-protocol instant messaging client - development libpurple-bin - multi-protocol instant messaging library - extra utilities libpurple-dev - multi-protocol instant messaging library - development files libpurple0 - multi-protocol instant messaging library pidgin - multi-protocol instant messaging client pidgin-data - multi-protocol instant messaging client - data files pidgin-dbg - Debugging symbols for Pidgin pidgin-dev - multi-protocol instant messaging client - development files Changes: pidgin (1:2.7.3-1ubuntu3.3) maverick-security; urgency=low . * SECURITY UPDATE: denial of service in Yahoo! protocol via malormed YMSG message - debian/patches/64_CVE-2011-1091.patch: validate messages in libpurple/protocols/yahoo/libymsg.c. - CVE-2011-1091 * SECURITY UPDATE: denial of service in MSN protocol via HTTP 100 response size - debian/patches/65_CVE-2011-3184.patch: properly calculate size in libpurple/protocols/msn/httpconn.c. - CVE-2011-3184 * SECURITY UPDATE: denial of service in SILC protocol via invalid UTF-8 sequence - debian/patches/66_CVE-2011-3594.patch: properly handle utf-8 in libpurple/protocols/silc/ops.c. - CVE-2011-3594 Checksums-Sha1: 84ae0518c87cc380f16ffa78c1ca3bcb60a982ec 1224474 pidgin-data_2.7.3-1ubuntu3.3_all.deb a64b341a0d7708feb34488117c07b891497459e3 15390429 pidgin_2.7.3-1ubuntu3.3_i386_translations.tar.gz 044c4e06f0cb824251d838645a3d6ddb2750291b 1711874 pidgin-dev_2.7.3-1ubuntu3.3_all.deb f71b1887b82d6515bb2c30cd8fb1031c3ac130a1 40100 finch-dev_2.7.3-1ubuntu3.3_all.deb aaf258075fdaa630a4093fcb8cdaf2d1efd2eee3 235470 libpurple-dev_2.7.3-1ubuntu3.3_all.deb affe64c05ceb0920f7642a11052fc21efde0d2a4 48028 libpurple-bin_2.7.3-1ubuntu3.3_all.deb 46788a7f5de63d289b5d4226985c333123025735 1785786 libpurple0_2.7.3-1ubuntu3.3_i386.deb 41bf4c8a57d1182c46eee9ddd71bfedfa1605344 547824 pidgin_2.7.3-1ubuntu3.3_i386.deb 7aeab7b9bcf32dbac007e7dec8404d0aaa305f33 6041410 pidgin-dbg_2.7.3-1ubuntu3.3_i386.deb 1f017df833d0079e60ca5867cf2ddc904b461961 221094 finch_2.7.3-1ubuntu3.3_i386.deb Checksums-Sha256: 338b76729f04c243682c331aaea8261c0a92d945075c1689ee8483bf8f600c73 1224474 pidgin-data_2.7.3-1ubuntu3.3_all.deb bbb30191b094be70b1a856d012755318756bdfdf248f21f9a1fd4301d123a45f 15390429 pidgin_2.7.3-1ubuntu3.3_i386_translations.tar.gz 958d55dabda9ac7479e204672623cb7e6d498d5830b321fc49dcf2d4dc1d6ca7 1711874 pidgin-dev_2.7.3-1ubuntu3.3_all.deb 4e41ebc70d67fcc3a175a99d718bf2fd47e7e510bbe1b0f4d3d1efa900950a3a 40100 finch-dev_2.7.3-1ubuntu3.3_all.deb a8a038f274bfa56e5620b9c72200f413d6c936071be4c9cfb154b7aee72512f5 235470 libpurple-dev_2.7.3-1ubuntu3.3_all.deb 12f3c38141c9bfde4a4c56c9fa69c5605f6860196a5501df4bf91f88cc72bfa2 48028 libpurple-bin_2.7.3-1ubuntu3.3_all.deb 43df4af4fcb792722757e411a68e2ffb2df8a9a6603672bb7e9d46b601a4ebc8 1785786 libpurple0_2.7.3-1ubuntu3.3_i386.deb ff9198c630094f7332f51aa6a1a35f490f58ae7ee31e69614e4e553237b615a4 547824 pidgin_2.7.3-1ubuntu3.3_i386.deb 89d1ec86be80d0e97fb1744a96dc7b2dd7e50e1c8187943403df499fa7c7464f 6041410 pidgin-dbg_2.7.3-1ubuntu3.3_i386.deb 39a2aa1124945d9049536af0539fbd188d250819d1d0c9b4ec8486cc35d183b9 221094 finch_2.7.3-1ubuntu3.3_i386.deb Files: 3a0ffa4a3d9dd9dd61e268567923b4ce 1224474 net optional pidgin-data_2.7.3-1ubuntu3.3_all.deb c07f6c2be913ee5be90fdf31527196fb 15390429 raw-translations - pidgin_2.7.3-1ubuntu3.3_i386_translations.tar.gz 80a7247054b24ff456e8bd923919fb59 1711874 devel optional pidgin-dev_2.7.3-1ubuntu3.3_all.deb 68f47df3be3ac9f6516fb0414a3b210d 40100 devel optional finch-dev_2.7.3-1ubuntu3.3_all.deb 4255373ac4b73a964438756a8d4fbbec 235470 libdevel optional libpurple-dev_2.7.3-1ubuntu3.3_all.deb 0ad1fe92435081a649630d603b37d689 48028 net optional libpurple-bin_2.7.3-1ubuntu3.3_all.deb dfd0a7d321acf09637047241b4142058 1785786 net optional libpurple0_2.7.3-1ubuntu3.3_i386.deb 4e6b5cfcca299495f494a80f1213ef44 547824 net optional pidgin_2.7.3-1ubuntu3.3_i386.deb a335c5e28980b0a7de8f17e126026f57 6041410 debug extra pidgin-dbg_2.7.3-1ubuntu3.3_i386.deb 17f44518cabb5a3621faeb99759339d1 221094 net optional finch_2.7.3-1ubuntu3.3_i386.deb Original-Maintainer: Ari Pollak