On Mon, Nov 24, 2008 at 06:10:14PM -0500, Michael Gilbert wrote: > Also note that Ubuntu seems to have missed CVE-2008-2956 [2], which > also applies to gaim/pidgin. The problem has not yet been fixed in > any of the Debian archives, which may explain why they did not include > a patch for this one. Actually, not even upstream has fixed this yet. :( http://people.ubuntu.com/~ubuntu-security/cve/CVE-2008-2956 -Kees -- Kees Cook @outflux.net