Technical Description

Fedora has released updated packages to correct multiple vulnerabilities identified in Gaim. These flaws may be exploited by remote attackers to execute arbitrary commands or cause a denial of service. For additional information, see : VUPEN/ADV-2005-1369 and VUPEN/ADV-2005-1261

Affected Products

Fedora Core 3
Fedora Core 4

Solution

Apply patches :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

709dfeddc2b8ae02448478518ad6579c SRPMS/gaim-1.5.0-1.fc3.src.rpm
788f4fe7561131aaf406c8bb7a473e50 x86_64/gaim-1.5.0-1.fc3.x86_64.rpm
17ac20c2e95577cbe268bff717d08bcc x86_64/debug/gaim-debuginfo-1.5.0-1.fc3.x86_64.rpm
d22007b8bf36278a4511ccb164f91de1 i386/gaim-1.5.0-1.fc3.i386.rpm
7ae413d0f5b18409f64f63887574f748 i386/debug/gaim-debuginfo-1.5.0-1.fc3.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

7c9ae8871169b9b52a165be73b886536 SRPMS/gaim-1.5.0-1.fc4.src.rpm
4903d7d71010d3f3e6ef83a42a9e8fdd ppc/gaim-1.5.0-1.fc4.ppc.rpm
e47699be139e84eb7c02758b3ce8f2e9 ppc/debug/gaim-debuginfo-1.5.0-1.fc4.ppc.rpm
c175e173ace9cb5cfdae196938c1a0f6 x86_64/gaim-1.5.0-1.fc4.x86_64.rpm
03e36cdf98f41d96d95c4aa7284b101c x86_64/debug/gaim-debuginfo-1.5.0-1.fc4.x86_64.rpm
939242b073bc6a64eeefe2d1ccfa4484 i386/gaim-1.5.0-1.fc4.i386.rpm
ea6e8adf567e8288ead13b9044989494 i386/debug/gaim-debuginfo-1.5.0-1.fc4.i386.rpm

References

http://www.vupen.com/english/advisories/2005/1454
http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00071.html
http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00070.html

ChangeLog

2005-08-18 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.