On Mon, Nov 24, 2008 at 06:10:14PM -0500, Michael Gilbert wrote:
> Also note that Ubuntu seems to have missed CVE-2008-2956 [2], which
> also applies to gaim/pidgin.  The problem has not yet been fixed in
> any of the Debian archives, which may explain why they did not include
> a patch for this one.

Actually, not even upstream has fixed this yet.  :(

http://people.ubuntu.com/~ubuntu-security/cve/CVE-2008-2956

-Kees

-- 
Kees Cook                                            @outflux.net


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to