Ha habido un fallo en la libreria libpurple de pidgin, que es la misma que tambien usa adiumx de mac, la cual permitia una divulgacion de informacion personal.
Se han actualizado los paquetes para Distribuciones Tipo Slackware desde la version 12.0 hasta la 13.1, se aconseja que quien lo use, haga el upgrade del paquete cuanto antes.
[slackware-security] pidgin (SSA:2011-055-01)
New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1,
and -current to fix a security issue.
Here are the details from the Slackware 13.1 ChangeLog:
+--------------------------+
patches/packages/pidgin-2.7.10-i486-1_slack13.1.txz: Upgraded.
Fixed potential information disclosure issue in libpurple.
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
HINT: Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try. This is another primary FTP site
for Slackware that can be considerably faster than downloading
directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating additional FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 12.0:
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/pidgin-2.7.10-i486-1_slack12.0.tgz
Updated package for Slackware 12.1:
ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/pidgin-2.7.10-i486-1_slack12.1.tgz
Updated package for Slackware 12.2:
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/pidgin-2.7.10-i486-1_slack12.2.tgz
Updated package for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/pidgin-2.7.10-i486-1_slack13.0.txz
Updated package for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/pidgin-2.7.10-x86_64-1_slack13.0.txz
Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/pidgin-2.7.10-i486-1_slack13.1.txz
Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/pidgin-2.7.10-x86_64-1_slack13.1.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/pidgin-2.7.10-i486-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/pidgin-2.7.10-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 12.0 package:
639d14ad11fc7df9a2144d902416dc18 pidgin-2.7.10-i486-1_slack12.0.tgz
Slackware 12.1 package:
1b32b5eea9b036bfcb6700ee53efd8a3 pidgin-2.7.10-i486-1_slack12.1.tgz
Slackware 12.2 package:
e14dc4935ba04824a8212fa6cd200d1b pidgin-2.7.10-i486-1_slack12.2.tgz
Slackware 13.0 package:
a815411654ae4bade1b2da86fc0a7c2b pidgin-2.7.10-i486-1_slack13.0.txz
Slackware x86_64 13.0 package:
90ba3fc3a66a9151b58d3c31263d8b76 pidgin-2.7.10-x86_64-1_slack13.0.txz
Slackware 13.1 package:
e28e50c9228699ec3c15a4e9e27bf9ee pidgin-2.7.10-i486-1_slack13.1.txz
Slackware x86_64 13.1 package:
fd3c6651fc3bfa69c8926989bbad00e4 pidgin-2.7.10-x86_64-1_slack13.1.txz
Slackware -current package:
403d57466d634d06155374aa5509630c pidgin-2.7.10-i486-1.txz
Slackware x86_64 -current package:
94fa5a028bf5e909b3044f883d404445 pidgin-2.7.10-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg pidgin-2.7.10-i486-1_slack13.1.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
[email protected]
Lo que useis otras distros, verificar vuestro gestor de paquetes en cuestion aver si han sacado ya alguna actualizacion para pidgin.
lo se, ubuntu duerme como siempre.
