Bug 3894 - newer pidgin version is available in MDV 2010.2 updates
Summary: newer pidgin version is available in MDV 2010.2 updates
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 1
Hardware: i586 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL: http://www.pidgin.im/
Whiteboard:
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2011-12-27 02:55 CET by David Walser
Modified: 2012-01-04 13:48 CET (History)
2 users (show)

See Also:
Source RPM: pidgin-2.10.0-1.1.mga1.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2011-12-27 02:55:10 CET
pidgin-2.10.1-0.1mdv2010.2 is that newer version.  It was a security update, updating the software to 2.10.1.  It doesn't appear that any adjustments to the SPEC were required.  The advisory for the update appears here:

http://lists.mandriva.com/security-announce/2011-12/msg00005.php
Comment 1 Manuel Hiebel 2011-12-27 03:15:05 CET
The package was in updates_testing but without bug report :(

There is now 'pidgin-2.10.1-1.mga1.src.rpm' in core/updates_testing to validate
-------------------------------------------------------


Suggested advisory:
-------------------
This update addresses the following CVEs:

- CVE-2011-3594: UTF-8 validating incoming messages before passing them to glib or libpurple


other fixes in this release:

Fix a memory leak when admitting UTF-8 text with a non-UTF-8 primary encoding
Fix crashes and memory leaks when receiving malformed voice and video requests

CC: (none) => fundawang
Assignee: bugsquad => qa-bugs

Manuel Hiebel 2011-12-27 03:15:28 CET

CC: fundawang => (none)

Comment 2 David Walser 2011-12-27 03:34:45 CET
Tested on i586.  It looks good.

Not sure if it matters, but usually the second line of the Help > About screen is an md5sum of some sort, but in this update it just says "Unknown" there.
Comment 3 Manuel Hiebel 2012-01-01 01:26:10 CET
Tested ok in x86_64 (irc and jabber) 

Suggested Advisory:
-------------
This update addresses the following CVE:

- CVE-2011-3594: UTF-8 validating incoming messages before passing them to glib
or libpurple


other fixes in this release:

Fix a memory leak when admitting UTF-8 text with a non-UTF-8 primary encoding
Fix crashes and memory leaks when receiving malformed voice and video requests
-------------

SRPM: pidgin-2.10.1-1.mga1.src.rpm

Could sysadmin please push from core/updates_testing to core/updates

Thankyou!

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 4 Thomas Backlund 2012-01-04 13:48:36 CET
Update pushed.

Status: NEW => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.