Stay Secure with the Latest Linux Advisories

security advisoryFedorainput validation

Fedora: 2009-8804 Moderate: Libnice Input Validation Issue

pidgin upgrade to 2.6.0 for the CVE-2009-2694, insufficient input validation in msn_slplink_process_msg(). 2.6.0 has Voice and Video support via farsight2 (Fedora 11+ only) and numerous other bug fixes. farsight2, libnice and gupnp- igd are version upgrades to make voice and video actually work on Fedora 11.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8804 2009-08-20 20:33:46 -------------------------------------------------------------------------------- Name : libnice Product : Fedora 11 Version : 0.0.9 Release : 1.fc11 URL : Summary : GLib ICE implementation Description : libnice is an implementation of the IETF's draft Interactive Connectivity Establishment standard (ICE). ICE is useful for applications that want to establish peer-to-peer UDP data streams. It automates the process of traversing NATs and provides security against some attacks. Existing standards that use ICE include the Session Initiation Protocol (SIP) and Jingle, XMPP extension for audio/video calls. -------------------------------------------------------------------------------- Update Information: pidgin upgrade to 2.6.0 for the CVE-2009-2694, insufficient input validation in msn_slplink_process_msg(). 2.6.0 has Voice and Video support via farsight2 (Fedora 11+ only) and numerous other bug fixes. farsight2, libnice and gupnp- igd are version upgrades to make voice and video actually work on Fedora 11. -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 2 2009 Brian Pepple - 0.0.9-1 - Update to 0.0.9. - Drop sha1 patch. Fixed upstream. * Fri Jul 24 2009 Fedora Release Engineering - 0.0.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Tue Jul 21 2009 Warren Togami - 0.0.8-2 - stun sha1 patch from upstream to make it work at all * Sun Jun 21 2009 Brian Pepple - 0.0.8-1 - Update to 0.0.8. * Sun Jun 14 2009 Brian Pepple - 0.0.7-1 - Updateto 0.0.7. - Add BR on gupnp-igd-devel. -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libnice' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Update libnice and pidgin in Fedora 11 to resolve input validation vulnerabilities, improving audio and video capabilities.. libnice update,Fedora security,pidgin upgrade,ICE implementation,input validation. . Severity: Important. LinuxSecurity.com Team

Aug 20, 2009 •Important Fedora