[SECURITY] Fedora 7 Update: pidgin-2.2.2-1.fc7

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2007-2714
2007-11-01 21:14:16.206007
--------------------------------------------------------------------------------

Name        : pidgin
Product     : Fedora 7
Version     : 2.2.2
Release     : 1.fc7
URL         : http://pidgin.im/
Summary     : A Gtk+ based multiprotocol instant messaging client
Description :
Pidgin allows you to talk to anyone using a variety of messaging
protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu,
ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and
Zephyr.  These protocols are implemented using a modular, easy to
use design.  To use a protocol, just add an account using the
account editor.

Pidgin supports many common features of other clients, as well as many
unique features, such as perl scripting, TCL scripting and C plugins.

Pidgin is not affiliated with or endorsed by America Online, Inc.,
Microsoft Corporation, Yahoo! Inc., or ICQ Inc.

--------------------------------------------------------------------------------
Update Information:

2.2.2 and CVE-2007-4999
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 24 2007 Warren Togami <wtogami(a)redhat.com&gt; - 2.2.2-1
- 2.2.2 CVE-2007-4999
* Sun Oct  7 2007 Michel Salim <michel.sylvan(a)gmail.com&gt; - 2.2.1-2
- BR on avahi-glib-devel to supply complete set of Avahi headers
* Mon Oct  1 2007 Warren Togami <wtogami(a)redhat.com&gt; - 2.2.1-1
- 2.2.1 with many bug fixes and CVE-2007-4996 DOS fix
* Sat Sep 29 2007 Michel Salim <michel.sylvan(a)gmail.com&gt; - 2.2.0-3
- Build against avahi proper instead of its HOWL compatibility layer
* Tue Sep 18 2007 Warren Togami <wtogami(a)redhat.com&gt; - 2.2.0-2
- License clarification
- Backport patches to fix memory leaks
- Backport patches to fix proxy settings & status scores
* Tue Sep 18 2007 Warren Togami <wtogami(a)redhat.com&gt; - 2.2.0-1
- 2.2.0
* Mon Aug 20 2007 Warren Togami <wtogami(a)redhat.com&gt; - 2.1.1-1
- 2.1.1
* Wed Aug 15 2007 Warren Togami <wtogami(a)redhat.com&gt; - 2.1.0-2
- Upstream fix backports
  115: gmail-notification-crash #2323
  117: drag-and-drop-mouse-click-group-header #2333
  118: jabber-confirm-authentication-unencrypted-crash #2493
* Mon Aug  6 2007 Warren Togami <wtogami(a)redhat.com&gt;
- require exact version of libpurple (#250720)
* Mon Jul 30 2007 Stu Tomlinson <stu(a)nosnilmot.com&gt; - 2.1.0-1
- 2.1.0
- Only include translations in libpurple instead of duplicating them in
  packages that depend on libpurple anyway
* Tue Jun 19 2007 Warren Togami <wtogami(a)redhat.com&gt; - 2.0.2-3
- libpurple obsoletes and provides gaim
  This smoothens multilib the upgrade path.
* Fri Jun 15 2007 Stu Tomlinson <stu(a)nosnilmot.com&gt; - 2.0.2-1
- 2.0.2
* Wed Jun  6 2007 Stu Tomlinson <stu(a)nosnilmot.com&gt; - 2.0.1-5
- Enable Bonjour support (#242949)
- Fix building against latest evolution-data-server
* Tue Jun  5 2007 Stu Tomlinson <stu(a)nosnilmot.com&gt; - 2.0.1-4
- Fix purple-remote for AIM & ICQ accounts (#240589)
- Add missing Requires to -devel packages
- Add missing BuildRequires for libxml2-devel
* Thu May 31 2007 Stu Tomlinson <stu(a)nosnilmot.com&gt; - 2.0.1-2
- Call g_thread_init early (#241883)
- Fix purple-remote syntax error (#241905)
* Mon May 28 2007 Stu Tomlinson <stu(a)nosnilmot.com&gt; - 2.0.1-1
- 2.0.1
--------------------------------------------------------------------------------
References:

  [ 1 ] CVE-2007-4999
        http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4999
--------------------------------------------------------------------------------
Updated packages:

c815bc7a98821e6c273c5bc94aae1232b6d2cd9e libpurple-2.2.2-1.fc7.ppc64.rpm
4e95c41bcc04d293d87699e40a69cefae53697df pidgin-debuginfo-2.2.2-1.fc7.ppc64.rpm
4c76b1401f827e782ab29eff7aaa2f64e9731206 finch-devel-2.2.2-1.fc7.ppc64.rpm
3ef087c5dc0e5aaca17a4f237b25e55f55b5852a finch-2.2.2-1.fc7.ppc64.rpm
1cb6a68f79e602c48de6d6b9e5d857b749228387 libpurple-perl-2.2.2-1.fc7.ppc64.rpm
969a6302f6ef8027587526ab3f4d18e72018bbf7 pidgin-devel-2.2.2-1.fc7.ppc64.rpm
685f0b2534ec4106371b736723b463457d6ca7f8 pidgin-2.2.2-1.fc7.ppc64.rpm
bc8f7f0ac81a49a31e9290f663a3e56caa3c4b7f pidgin-perl-2.2.2-1.fc7.ppc64.rpm
4a39cd585bba00a1fbe376e12b502cd1d374f993 libpurple-tcl-2.2.2-1.fc7.ppc64.rpm
6d4a270c2411df27f355ff42925ea80a27ca4ff0 libpurple-devel-2.2.2-1.fc7.ppc64.rpm
d96b4ad4844c863a8081e08347eaded0f27832cf pidgin-devel-2.2.2-1.fc7.i386.rpm
f1d85a1eae90bc19c3b0de50e7320735e4b6975e pidgin-perl-2.2.2-1.fc7.i386.rpm
6128ceb692cd13aaab5dd776cabdd7565c08ec1a libpurple-perl-2.2.2-1.fc7.i386.rpm
c979b9e0f9e082dcdaf8b826db87404b82fb222e libpurple-devel-2.2.2-1.fc7.i386.rpm
75e845c0f0874b7c2fbb30d44fd58bc988b3bea4 libpurple-2.2.2-1.fc7.i386.rpm
2dbed464c27b5a6fa23b6131a7323a9c7bcf23ea finch-2.2.2-1.fc7.i386.rpm
4e8fdcd30afd13c94018e7330fdd204c2a72bd3b pidgin-2.2.2-1.fc7.i386.rpm
29ef6fdfe293beac41d83d537190557971ae1076 finch-devel-2.2.2-1.fc7.i386.rpm
7c6b50de10e32846491270805933a4f1d51a9e05 libpurple-tcl-2.2.2-1.fc7.i386.rpm
5af7a0c8f5756b1d25080889adc4b3b850745bef pidgin-debuginfo-2.2.2-1.fc7.i386.rpm
b21127c207b5154e82d289c37bbd2b51757c8bf2 pidgin-devel-2.2.2-1.fc7.x86_64.rpm
36da424041a39aee6813555226c1aa42c39bb63f pidgin-2.2.2-1.fc7.x86_64.rpm
11f4040bd299c45669b104864454e2fe4f890690 pidgin-debuginfo-2.2.2-1.fc7.x86_64.rpm
3b367e424f7f89756b7f970f75a9e1a281bcc84a finch-devel-2.2.2-1.fc7.x86_64.rpm
e71a011806564ab473e42b7a4fe01c3e93065142 finch-2.2.2-1.fc7.x86_64.rpm
d72f31a4b1b24de27bd914c38c846040a082c676 libpurple-devel-2.2.2-1.fc7.x86_64.rpm
b84abb3c16cbb6c4a1284f4f2abea6a6d78f355f pidgin-perl-2.2.2-1.fc7.x86_64.rpm
d7840d0918175a3c27b25bc305cac293d62d46a1 libpurple-tcl-2.2.2-1.fc7.x86_64.rpm
1d9b96d7889536a61013c71cbc57032d6a707476 libpurple-perl-2.2.2-1.fc7.x86_64.rpm
d3940c4adc1be04a2cd2b1669dd667f121bd5d53 libpurple-2.2.2-1.fc7.x86_64.rpm
8eb104c24ea05514fb93a9bfb2b8969d14e5c3c9 libpurple-devel-2.2.2-1.fc7.ppc.rpm
74de024fcea6a753231f0e8da1ff4fa78eeda579 finch-devel-2.2.2-1.fc7.ppc.rpm
01399a7f732ba3f0bc7b881ee83196118e331216 pidgin-debuginfo-2.2.2-1.fc7.ppc.rpm
d2f3065b190b0067caa4c49ff3a463b22a158336 pidgin-perl-2.2.2-1.fc7.ppc.rpm
f58118d5d49f38343720d4eb0510d7bd580b0aed libpurple-2.2.2-1.fc7.ppc.rpm
d60d8143e25b981a6ef6b23dcac67df3ccdf2849 pidgin-devel-2.2.2-1.fc7.ppc.rpm
2365301fbce12a31a966f8ccc59767fcfe4c0070 finch-2.2.2-1.fc7.ppc.rpm
29d59102f59ae844c71f26d508b3bc235576efb9 pidgin-2.2.2-1.fc7.ppc.rpm
26d4fa4cad1ef895d9115b26d191ea87a2b08146 libpurple-perl-2.2.2-1.fc7.ppc.rpm
f10b7968aaa11beeab55064fbc2d30e834f19242 libpurple-tcl-2.2.2-1.fc7.ppc.rpm
78536cef7e8da6ad5c2ccde51e46393b2af7f2c9 pidgin-2.2.2-1.fc7.src.rpm

This update can be installed with the "yum" update program.  Use 
su -c 'yum update pidgin' 
at the command line.  For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------