Technical Description

Fedora has released a security patch to correct two vulnerabilities identified in Gaim. These flaws may be exploited by remote attackers to cause a denial of service. For additional information, see : VUPEN/ADV-2005-0725

Affected Products

Fedora Core 4
Fedora Core 3

Solution

Upgrade the affected package :
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
ac429c8d93a279c67b8ab1fd85137157 SRPMS/gaim-1.3.1-0.fc4.src.rpm
5c56ca6453da77329c41865eaf04a185 ppc/gaim-1.3.1-0.fc4.ppc.rpm
88baf07667f49d8b64bbcc32cc3893de ppc/debug/gaim-debuginfo-1.3.1-0.fc4.ppc.rpm
2dc3fad568de1cb1d847d6e2bd0a18d1 x86_64/gaim-1.3.1-0.fc4.x86_64.rpm
962c9bb2fc25e288095c183d97d82fd4 x86_64/debug/gaim-debuginfo-1.3.1-0.fc4.x86_64.rpm
ec21757c012921fbe370ab0f231aa460 i386/gaim-1.3.1-0.fc4.i386.rpm
bbe720360f37608392f05a027bcf391d i386/debug/gaim-debuginfo-1.3.1-0.fc4.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
290bcd97b27afcd71c802b72993250c5 SRPMS/gaim-1.3.1-0.fc3.src.rpm
3a6a13610fad43bdb784c376899647ba x86_64/gaim-1.3.1-0.fc3.x86_64.rpm
aaddc70a7dfdb9e03b7e90073174ea67 x86_64/debug/gaim-debuginfo-1.3.1-0.fc3.x86_64.rpm
fdfa1e0331281d07cad2911e1ff9945a i386/gaim-1.3.1-0.fc3.i386.rpm
090675e02fc726449b52e573426375b5 i386/debug/gaim-debuginfo-1.3.1-0.fc3.i386.rpm

References

http://www.vupen.com/english/advisories/2005/0804
http://www.redhat.com/archives/fedora-announce-list/2005-June/msg00023.html
http://www.redhat.com/archives/fedora-announce-list/2005-June/msg00022.html

ChangeLog

2005-06-17 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.