Printable View
Haven't seen this posted yet, but it seems fairly serious:
http://archives.neohapsis.com/archiv...4-01/0994.html
Application: Gaim <= 0.75
Severity: 12 vulnerabilities were found in the instant
messenger GAIM that allow remote compromise
Risk: Critical
Vendor Status: Vendor has fixed in CVS, but feels not ready for
release because of problems with HEAD
Reference: http://security.e-matters.de/advisories/012004.html
No corrected versions (> 0.75) available right now...
/nebulus
You sure? I just updated mine on RH last night...Quote:
No corrected versions (> 0.75) available right now...
https://rhn.redhat.com/errata/RHSA-2004-032.html
From gaim.sourceforge.net
[/edit]Quote:
January 28th, 2004 - 1:51PM EST Security vulnerabilities
On Monday, several potential security vulnerabilities in Gaim 0.75 (and previous versions) were publicly disclosed by Stefan Esser. Due to problems with current Gaim CVS (Yahoo! still not working properly being the most influential) we are not yet ready to release 0.76. You are encouraged to get and apply this patch from the FreeBSD security team, released with the disclosure.
Slackware updates -- Links at bottom of advert for specific distro number
Probably should have phrased that a little better. There are source code fixes, but since I use the windows client...
/nebulus
Ah, that explains it. Thanks for the update. :)