Bug 65263

Summary:	security issues in gaim 0.57
Product:	[Retired] Red Hat Linux	Reporter:	Matt Selsky <selsky>
Component:	gaim	Assignee:	Christopher Blizzard <blizzard>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	7.3	CC:	mjc, wtogami
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2002-08-06 07:12:08 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Matt Selsky 2002-05-21 06:05:14 UTC

The gaim project has released version 0.58 to fix security problems in 0.57
including:

 * Bug-fix for potential buffer overflow in Jabber plugin. (Thanks, rwscott)
 * Tempfiles used for secure MSN/HotMail login (added in 0.57) are now
themselves created securely.

See http://gaim.sourceforge.net/ChangeLog for the complete change log.

This should be fixed since versions <=0.57 contained several bugfixes which
would be nice to have in place.

Comment 1 Warren Togami 2002-05-22 10:38:55 UTC

When this is fixed, please also apply the htmlview default patch in Bug 63115 in
order to fix that minor bug.

Comment 2 Mark J. Cox 2002-05-22 10:49:38 UTC

Just a note that the "Tempfiles used for secure MSN/HotMail login (added in
0.57) are now themselves created securely." issue only affects version 0.57 of
gaim (verified) and therefore does not affect the versions of gaim that we have
shipped in Red Hat Linux releases.

Comment 3 Warren Togami 2002-07-10 12:00:02 UTC

Fixed, 0.59 is in Limbo beta.
Close?

Comment 4 Matt Selsky 2002-07-10 15:55:14 UTC

Sounds good to me.  Thanks, guys.

Comment 5 Christopher Blizzard 2002-07-10 16:17:04 UTC

Waiting for errata.

Comment 6 Mark J. Cox 2002-08-06 07:12:08 UTC

An errata has been issued which should help the problem described in this bug report. 
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen 
this bug report if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2002-107.html