建御雷です。 以下のパッケージを VineSeed に put しました。 pidgin-2.10.10-1vl7.{src,i686,x86_64}.rpm pidgin-devel-2.10.10-1vl7.{i686,x86_64}.rpm finch-2.10.10-1vl7.{i686,x86_64}.rpm finch-devel-2.10.10-1vl7.{i686,x86_64}.rpm libpurple-2.10.10-1vl7.{i686,x86_64}.rpm libpurple-devel-2.10.10-1vl7.{i686,x86_64}.rpm - new upstream release (including security fix for CVE-2014-3694,3695,3696,3697,3698) ソースの更新です。 CVE-2014-3694,3695,3696,3697,3698 が修正されてます。 CVE-2014-3694: Insufficient SSL certificate validation http://www.pidgin.im/news/security/?id=86 CVE-2014-3695: Remote crash parsing malformed MXit emoticon http://www.pidgin.im/news/security/?id=87 CVE-2014-3696: Remote crash parsing malformed Groupwise message http://www.pidgin.im/news/security/?id=88 CVE-2014-3697: Malicious smiley themes could alter arbitrary files http://www.pidgin.im/news/security/?id=89 CVE-2014-3698: Potential information leak from XMPP http://www.pidgin.im/news/security/?id=90 以上、よろしくお願いいたします。 -- □■□ ■ Yoji TOYODA (Takemikaduchi) □ GnuPG Key fingerprint = DCAA 7D3F F44E 3F96 63CD B834 52E2 B982 8616 2E6D _______________________________________________ VineSeed mailing list VineSeed@xxxxxxxxxxxxx http://lists.vinelinux.org/mailman/listinfo/vineseed