Security bugs are reported here via bugzilla

[Thomas Houssin <thomas.houssin AT gmail.com>]

Synopsis
========
Gaim contains two vulnerabilities, potentially resulting in the
execution of arbitrary code or Denial of Service.

Background
==========
Gaim is an instant messenger client for several protocols.

Description
===========
Remote crash on some protocols (CAN-2005-1261) :
It is possible for a remote user to overflow a static buffer by sending
an IM containing a very large URL (greater than 8192 bytes) to the Gaim
user. This is not possible on all protocols, due to message length
restrictions. Jabber are SILC are known to be vulnerable.

MSN Remote DoS (CAN-2005-1262) :
Potential remote denial of service bug resulting from not checking a
pointer for non-NULL before passing it to strncmp, which results in a
crash. This can be triggered by a remote client sending an SLP message
with an empty body.


Affected packages
=================
gaim in all grimoires is affected.
This is now fixed in devel, test and stable grimoire.

Resolution
==========
All gaim users should upgrade to the latest available version:
        #scribe update
        #cast -c gaim

-- 
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623  BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature