Security Vulnerabilities in Pidgin 2.5.5

[Noam Rathaus]

Binary package hint: pidgin

Multiple issues affecting Pidgin 2.5.5

See:
http://www.pidgin.im/news/security/?id=29
http://www.pidgin.im/news/security/?id=30
http://www.pidgin.im/news/security/?id=31
http://www.pidgin.im/news/security/?id=32

Basically:
The remote host is running Pidgin earlier than 2.5.6. Such versions are reportedly affected by multiple buffer overflow vulnerabilities:

  - A buffer overflow is possible when initiating a file transfer to a malicious buddy over XMPP. (CVE-2009-1373)

  - A buffer overflow issue in the 'decrypt_out()' function can be exploited through specially crafted 'QQ' packets.(CVE-2009-1374)

  - A buffer maintained by PurpleCircBuffer which is used by XMPP and Sametime protocol plugins can be corrupted if
    it's exactly full and then more bytes are added to it. (CVE-2009-1375)

  - An integer-overflow issue exists in the application due to an incorrect typecasting of 'int64' to 'size_t'. (CVE-2009-1376)

[Marc Deslauriers (mdeslaur)]

This was fixed today in the following USNs:

http://www.ubuntu.com/usn/USN-781-1
http://www.ubuntu.com/usn/USN-781-2

For Karmic, there is a merge request in bug #380806.