Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Fedora: 2009-8804 Moderate: Libnice Input Validation Issue

fedora
Calendar Grey August 20, 2009
Scroller Fedora
Update libnice and pidgin in Fedora 11 to resolve input validation vulnerabilities, improving audio and video capabilities.
pidgin upgrade to 2.6.0 for the CVE-2009-2694, insufficient input validation in msn_slplink_process_msg()

Summary

libnice is an implementation of the IETF's draft Interactive Connectivity

Establishment standard (ICE). ICE is useful for applications that want to

establish peer-to-peer UDP data streams. It automates the process of traversing

NATs and provides security against some attacks. Existing standards that use

ICE include the Session Initiation Protocol (SIP) and Jingle, XMPP extension

for audio/video calls.

Update Information:

pidgin upgrade to 2.6.0 for the CVE-2009-2694, insufficient input validation in msn_slplink_process_msg(). 2.6.0 has Voice and Video support via farsight2 (Fedora 11+ only) and numerous other bug fixes. farsight2, libnice and gupnp- igd are version upgrades to make voice and video actually work on Fedora 11.

Topics%20covered

Topics Covered

security advisory Fedora input validation upgrade pidgin libnice voice support

Change Log

* Sun Aug 2 2009 Brian Pepple - 0.0.9-1 - Update to 0.0.9. - Drop sha1 patch. Fixed upstream. * Fri Jul 24 2009 Fedora Release Engineering - 0.0.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Tue Jul 21 2009 Warren Togami - 0.0.8-2 - stun sha1 patch from upstream to make it work at all * Sun Jun 21 2009 Brian Pepple - 0.0.8-1 - Update to 0.0.8. * Sun Jun 14 2009 Brian Pepple - 0.0.7-1 - Update to 0.0.7. - Add BR on gupnp-igd-devel.

References

Fedora Update Notification FEDORA-2009-8804 2009-08-20 20:33:46
Name : libnice Product : Fedora 11 Version : 0.0.9 Release : 1.fc11 URL : Summary : GLib ICE implementation Description : libnice is an implementation of the IETF's draft Interactive Connectivity Establishment standard (ICE). ICE is useful for applications that want to establish peer-to-peer UDP data streams. It automates the process of traversing NATs and provides security against some attacks. Existing standards that use ICE include the Session Initiation Protocol (SIP) and Jingle, XMPP extension for audio/video calls.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libnice' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: libnice
Product: Fedora 11
Version: 0.0.9
Release: 1.fc11
URL: Summary : GLib ICE implementation

Topics%20covered

Topics Covered

security advisory Fedora input validation upgrade pidgin libnice voice support

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.