Bug#319443: kopete: Kopete embeds a local copy of the vulnerable libgadu (CAN-2005-1852)

[Moritz Muehlenhoff <jmm@inutil.org>]

Package: kopete
Severity: normal

Kopete embeds a copy of the gadu library, which is vulnerable to
remotely exploitable integer overflows. Judging from the original KDE
advisory the embedded version is only used as a fallback. As there's
a dependency on Debian's libgadu, which has already been fixed Kopete
is probably not directly affected. If this should not be the case please
bump the urgency.

Original advisory:
http://www.kde.org/info/security/advisory-20050721-1.txt

Cheers,
         Moritz
-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.4.29-vs1.2.10
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)