telepathy-gabble security fix

Bug #720201 reported by Omer Akram on 2011-02-16
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
telepathy-gabble (Ubuntu)
Medium
Jamie Strandboge
Karmic
Medium
Jamie Strandboge
Lucid
Medium
Jamie Strandboge
Maverick
Medium
Jamie Strandboge
Natty
Medium
Jamie Strandboge

Bug Description

Binary package hint: telepathy-gabble

telepathy upstream just announced a security fix for telepathy-gabble in 0.11.x 0.10.x and 0.8.x series. Ubuntu should have the fix too.

Omer Akram (om26er) wrote :
Changed in telepathy-gabble (Ubuntu):
importance: Undecided → Medium
assignee: nobody → Omer Akram (om26er)
Jamie Strandboge (jdstrand) wrote :

Omer, I have already prepared the update for natty, and was waiting for the unembargo. Have you uploaded already?

Changed in telepathy-gabble (Ubuntu Lucid):
status: New → Fix Committed
importance: Undecided → Medium
assignee: nobody → Jamie Strandboge (jdstrand)
Changed in telepathy-gabble (Ubuntu Maverick):
status: New → Fix Committed
importance: Undecided → Medium
assignee: nobody → Jamie Strandboge (jdstrand)
Changed in telepathy-gabble (Ubuntu Natty):
status: New → Fix Committed
assignee: Omer Akram (om26er) → Jamie Strandboge (jdstrand)
Changed in telepathy-gabble (Ubuntu Karmic):
status: New → Fix Committed
importance: Undecided → Medium
assignee: nobody → Jamie Strandboge (jdstrand)
Changed in telepathy-gabble (Ubuntu Natty):
assignee: Jamie Strandboge (jdstrand) → nobody
status: Fix Committed → In Progress
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package telepathy-gabble - 0.11.6-1ubuntu2

---------------
telepathy-gabble (0.11.6-1ubuntu2) natty; urgency=low

  * SECURITY UPDATE: don't process google:jingleinfo updates from contacts
    - debian/patches/0001-ignore-google-jingleinfo-from-contacts.patch: don't
      accept jingleinfo except from self or server
    - CVE-2011-XXXX
    - LP: #720201
 -- Jamie Strandboge <email address hidden> Tue, 15 Feb 2011 12:40:34 -0600

Changed in telepathy-gabble (Ubuntu Natty):
status: In Progress → Fix Released
Changed in telepathy-gabble (Ubuntu Natty):
assignee: nobody → Jamie Strandboge (jdstrand)
Jamie Strandboge (jdstrand) wrote :
Changed in telepathy-gabble (Ubuntu Lucid):
status: Fix Committed → Fix Released
Changed in telepathy-gabble (Ubuntu Maverick):
status: Fix Committed → Fix Released
Changed in telepathy-gabble (Ubuntu Karmic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.